It is a funding based project. So clearly it is necessary, they report what they do in order to get donations. And you just assume maintainers are unhappy with the way they act. Your attacks are without any factual backing. Hackers are not acting more or less, depending on the amount software developers put into security. But when good guys find vulnerabilities, blackhat hackers got less holes to poke in. And they are getting more difficult to exploit.