I bunch of unreviewed code managed by someone with poor security practices is a larger attack surface to me. I don’t see how an easily bypassable relay policy default changes the attack surface at all.
Discussion
Understand your concern and with one maintainer, it is a risk.
Markets move (as do our actions within them) though and as the market votes, maintainers will follow to where their actions are aligned with a future that they see.
The chaos (on both sides) is a natural and positive consequence of the first truly global free market…… a misunderstanding of holding one variable constant - while changing others when it is in fact many variables changing.
Distributed Authoritarianism entered the chat