I'm confused, so if open source is working as expected then what's the point of the blogpost?
It's a post about google screwing up their process and also pushing a bad update to a ton of people, and other people cleaning up their mess. I'm glad "open source is working" but that's a small part of the picture and I don't see why that would remove the point of the blog post.
Citation needed.
I think they're referring to past contributions to AOSP from GrapheneOS developers.