That's an orphaned commit on their personal website (and that text doesn't appear anywhere on it), and still nobody seems to have any idea who has taken their place. I don't believe that someone should be eternally punished because of making poor decisions, and with time even a pattern of poor decisions can be forgiven, but as it stands from the outside there's zero clarity on what, if anything, actually happened, no apologies, and ultimately no way to know who you're trusting when you install GrapheneOS.

On one hand, the track record for the actual OS is still completely fine as far as anyone knows. On the other hand, the stuff said and done on record is pretty tough to swallow for someone you are investing a lot of trust into, for an OS that is meant to be privacy and security focused.

Like. It's one thing if you are a casual user running random ROMs off XDA, the risk is high and the only real assurance you get is online reputation and the normal assurances of social pressure. But this is software endorsed by Edward Snowden and many others whose opinions regarding security and privacy are well-regarded. The stakes could be quite high for some users. In the light of that, I really don't like the situation here at all.

Dismiss it if you want to, but there's really absolutely no good reason for this to simply remain effectively unaddressed indefinitely.