So if there’s a patch that fixes a devastating bug then distros should ship with the bug, got it.

Or reach out to the developer who does not respond to email (who is likely also not a signer of this open letter and who may or may not agree with it).

Multiply this (futile) reach-out step times however many developers are involved in touching any code of any project being shipped during any if the multiple days, weeks, or months between releases.

Which is probably hundreds of unanswered emails. Mmmkay.