Your first point is addressed directly by the article. Your second point essentially requires a decentralized charity to exceed the size of an attacker, which

Your first point is addressed directly by the article. Your second point essentially requires a decentralized charity to exceed the size of an attacker, which isn't a realistic form of security.