They have proven to "behave well" for years. Destroying the signing keys in the midst of a hostile takeover is the responsible thing to do. Its for the safety of their users. Thats a commendable trait to have.

What does it means to "behave well" for you in this case ?

Same, which is why I'm glad he deleted the signing key in this case. It was the only right play given the situation. I'd have done the same and I'd expect anyone with integrity to do likewise.

> if I can’t trust the developers to behave well, i can’t trust the product to continue to do what it says it can do for me.

So you'd be willing to give up Linux because Linus cannot stop verbally abusing people to this day? Because that's what I did. I decided that any project where the main dev(s) openly abuse people in public, is the line I draw.

I know that is an extremely controversial choice that many people will disagree with, but it's my choice to make and I don't regret it.