Sure, that could be argued either way. To be honest, it's too complicated for me to really care about. I think GrapheneOS is a solid project, currently.
My biggest problem is that Daniel refuses to apologize or even acknowledge these issues. I try to judge people not by their mistakes, but by their responses to these mistakes.
My worry with GrapheneOS is that the same thing to Copperhead might happen to it. I don't know or care who was right/wrong in that situation. But the end result was that Daniel deleted the signing keys, so I am worried that if Daniel is pressured form either real or imaginary attacks, he might do the same to GrapheneOS.
I want the project to go on for as long as possible, and part of that requires honest reflection.