They don’t explain what they think GitHub should, or even could, have done instead. Should GitHub have stopped improving their product, even in ways like the ones mentioned (package distribution, minimal issue management, security scanning) that were obvious and in-demand years ago?
To me, the post doesn’t acknowledge that GitHub did nothing wrong or even unpredictable, and Gemnasium accepts full responsibility for the outcome.
Another way to write the GitHub-related part of this post would be “We had years to make this a business before GitHub acted on customer requests for things that customers obviously wanted. GitHub actually moved slowly enough that we had more time than any reasonable entrepreneur might have expected. We couldn’t.”