Hmmm, dunno. The only evidence being reported is that they locked out the project admins then attempted to destroy everything they could.

To me, that's not a "neutral" thing. It seems like it was only luck that the rm-ing didn't work, else there would be a bunch more unhappiness.

People do run Gentoo on production systems. Though they obviously shouldn't pull straight from upstream without some real testing before deployment, in the real world it does get done.