I'd say that your rules apply to everyone whether or not they are part of an open source community. Being a closed source dev doesn't make malware morally acce

I'd say that your rules apply to everyone whether or not they are part of an open source community. Being a closed source dev doesn't make malware morally acceptable. Lying is a complicated thing as everyone does it, but no matter the context, you can't be surprised if you face social consequences for deceiving people. And allowing people to use your stuff for wrongdoing is also going to affect your reputation, in the same way that someone using your Facebook account for bad shit is going to come back to you. A more interesting discussion would be on the relationship between a volunteer organization and its volunteers, as this post is probably in response to a recognized community contributor.