I mean your article is pretty bad. You posted two promptly patched security vulnerabilities and then essentially just wrote the same thing over and over and over again about how it's a sign of the whole project without really building up a case showing consistent negligence.