Actual post title is “Painful Lessons Learned in Security and Community”. Please don’t sensationalize submission titles.

Haven’t followed what the op refers to as a “debacle” but from this post it reads like some people publicly disclosed an issue without going through the proper security issue disclosure route and made a fuss.