I'm truly staggered by the amount of commits here blaming the issue on the "lack of identification" or "dependency on unconfirmed identities". Even worse, some posts even proposed "security audits from trusted companies".

I knew people would be reactionary, but not "unwind most of the free software movement ideals" reactionary.