Absolutely. I don't see why the author brushed off the maintainer's responsibility so casually.

> lets roll for a bit with the assumption that a small amount of extra care on Tarr’s part could have avoided this mess.

Are you kidding? The bare minimum of not just handing a repository under your name to a random stranger is apparently a hard to fathom concept for this author.