Um, good? I mean, it's not great that they found a vulnerability, but it's good that someone is looking at this.

This is how things are supposed to work. Protocol and implementations are open source so people can inspect what they do and point out problems and get them fixed.

This finally means that researchers are paying attention to the Matrix protocol. This makes me more confident in the Matrix stuff rather than less.