Are we sure that the code review process hasn’t been compromised if one of the core developers’ key has been?

It seems reasonable that some due diligence in this area be done in light of this discovery.