I think it may just be bad automated flagging. I vouch'd them since they don't really seem to violate any rules/guidelines (right?)

Indeed. I've seen it happen before and it appears that they have automatic downvoting based on some criteria, possibly just some classifier. I've attributed it to some bot attack before, but it's a bit too common now.

Why does it being common downplay the bot attack to you? As time goes on, I'd assume bots activity to increase. I do not see it ever going away.

bots get caught and downvoting requires reputation.

All the comments I've seen about warning signs point to opencode the cli, where this is about one of opencode's hosted services.

There's a pattern though, they companies at the front of the Ai hype train love to brag about their eyes and brain free coding practices. Reap what you sow I suppose

Because they're unrelated to this incident.

As the person who worked with the OpenCode team on the CLI security regression this last week, I do not think they are unrelated, though there is no direct connection.

My read is too much vibemaxxing, not enough critical analyses of the Ai output and (re)designs of various systems in their code base.

Breaking Rule #2 - never blindly trust the output from Ai

https://susam.net/inverse-laws-of-robotics.html