I'm not fine with it. But those researchers are not helping at all. And also, if I had to pick between a somewhat inclusive mode of work where some rando can g

I'm not fine with it. But those researchers are not helping at all. And also, if I had to pick between a somewhat inclusive mode of work where some rando can get code included at the slightly increased risk of including malicious code, and a tightly knit cabal of developers mistrusting all outsiders per default: I would pick the more open community. If you want more paranoia, go with OpenBSD. But even there some rando can get code submitted at times.