As the builder of a competitor, I expect bias. He checked the code rather than trusted an anonymous blog post. Most people haven't.
Discussion
yeah but he didn't accurately describe the result.
there just hasn't been enough time to review and theres lots of nuance.

do you even know which size of the discussion you're criticizing?
heres the original vulnerability disclosure.
make yourself useful and check out waxwings Jan 7th post and examine the code to see if Ashigaru has implemented any modulation of the hardcoded RSA key for each CJ round, as he suggests.
https://groups.google.com/g/bitcoindev/c/CbfbEGozG7c/m/w2B-RRdUCQAJ?pli=1