"Rules for thee, but not for me" makes some sense for OSS maintainers. The maintainer may be comfortable using AI themselves but isn't interested in slop grenade PRs, especially if they accepted PRs fairly begrudgingly in the first place.

Often I'd rather have a good prompt than a PR. Easier to see the intent of the contributor.

Perhaps but it does make the list less useful as a way to find ethical open source projects.

And I think that's doing the maintainers a disservice.

"Please don't have your agent send us PRs we don't want to review it" -> yeah, totally reasonable open source maintainer behaviour, doesn't update my perception of the project at all.

"All code in this repo must be written by hand" -> This is probably not a serious project and I'll make a mental note not to depend on it.

"Code must be written by hand" is not at all incompatible with "use agents to scan for vulnerabilities", or for that matter "use agents to find bugs", "use agents to help with profiling to give you data for optimization", or any number of things that aren't writing the code for you.

There's no point in using agents to find vulns if you don't have time to fix them all (you don't)