RE: https://toot.cafe/@baldur/117484005963344373

I've been way too much in "patch all the things" emergency mode to spend the time digging in, but this does seem to track.

Burning trust on bad security announcements is basically the worst thing you can do. I'm going to withhold judgement for now, but this is worth having in mind.