It is not just bad researchers behavior, it not just unprofessional, it is unacceptable in scientific community, this is an fact, this is where most of outrage is coming from, but at same time similar unethical behavior is legal to a degree[0] in business organization.

No one is arguing that any online community perfect, no organization is perfect, but organization imperfections is not a justification for unethical behavior toward given imperfect organization, to a large degree, there rare case where it is justified, but this not the case here, at all what so ever.

> I think it's naive for them to assume that all submissions are done in good faith.

This is false, there where numerous attempts to submit backdoor to linux kernel, and most in the community are aware that such attempts will never stop, this why also some people criticize that there's study is just another scientific garbage paper.

What is unacceptable in name of science submitting commits in bad faith without informed consent.

What is unacceptable in name of science or otherwise ATTEMPTING an unauthorized penetration testing, this is illegal.

[0] https://www.theatlantic.com/technology/archive/2014/06/every...