> They wanted to see how the review goes if they aren't aware that someone is testing them. You cant do this with consent.

Ridiculous. Does the same apply to pentesting a bank or a government agency. If you wanted to pentest these of course you'd get approval from an executive that has power to sanction this. Why would Linux development be an exception? Just ask GKH or someone to allow you to do this.