True, I mean ESR is known for being pro gun, and a lot of people here in Europe would not agree with that. However, if you don't agree with the primary develope

True, I mean ESR is known for being pro gun, and a lot of people here in Europe would not agree with that. However, if you don't agree with the primary developer on something as fundamental as your being, chances are you don't want to collaborate with them, do PRs, or give them feedback. On top of that, the person has caused drama, which is a sign of instability to a FOSS project (just take a look at all the drama TdR (or lets call him deraadt@) caused over the years...). Given how easy it is to obfuscate a vulnerability in code I would not want to run code programmed primarily by someone who has a peculiar world view (except in a sandbox). At least its a yellow flag to audit it well (but that is no guarantee). With regards to FOSS projects its just a time bomb till some nefarious actor (Russian, Chinese, North Korean, Iranian, etc) does something bad to a popular FOSS project. But the worries are the same when the author is unknown (TrueCrypt, for example), and some people have been paranoid about SELinux ever since. Taking above into account IMO the heads up is fair. And with all that, you're still free to make up your own mind. Nobody is telling you that you should avoid the project. They're suggesting you look into it.