Except that doesn’t work with international software projects. Someone in another country takes over with consent of the community. It’s disruptive but not fatal if there’s sufficient interest in the project.

Like the other reply, I would expect them to just move the project to a different country then instead.

Honestly, the OS that prides itself on "Only two remote holes in the default install, in a heck of a long time!" is not going to introduce a remote hole on purpose, that'll be one cold day in heck.

This is really the least thing to worry about.