It guarantees that the group will receive the money and the exploit will be released if the fundraising is successful.
I'm a blockchain hater as well, but I'm interested. What is a better platform for something like this, assuming that you trust the actor who owns the address?
This seems to imply I'm one. I'm not.
However, in this specific instance it doesn't make sense. See my comment above. (https://news.ycombinator.com/item?id=30775834)