I don't know enough about the specifics of this situation. My point is, I don't agree with the idea that volunteers inherently owe nothing.

And to focus on a different part of the analogy for a moment—if somebody looks more closely at what I'm teaching students, and sees that I'm actually showing them how to use flamethrowers, yeah, they have a right to be upset. Again, it doesn't matter that I'm a volunteer, they've placed a significant degree of trust in me.

People should still audit their dependencies, just like people should observe my teaching. But it's also fair for them to have expectations.