It does raise questions though. Should there be a more formal scrutiny process for less trusted developers? Some kind of background check process?
Runs counter to how open source is ideally written, but for such a core project, perhaps stronger checks are needed.
