They're storing PII in the github repo they kicked the core maintainers out of?
Just stop trying to make excuses for these people. They screwed up, and based on this press release, don't seem to have any interest in actually correcting those mistakes.