What I don’t understand about this whole situation: why does it matter where commits originate from if you’re dealing with an open source project? Does the Linux kernel not peer review code? Can’t security researchers from around the world comb over the source code for vulnerabilities/malware? Or is this all just political theatrics?