To make it short and to be agreeable: I think it's been unproductive for Micay to spend time addressing attacks on himself or on GrapheneOS, and I agree that it has tarnished his public reputation.
To express my more complete opinion: I do not think that Micay’s responses are endangering the GrapheneOS project to the extent that users should be concerned about its security. I don't believe he has unrestricted access ("has root") or that his involvement poses any risk to GrapheneOS' users. Instead, I think his participation has been crucial to the technical achievements of this security-focused project. Micay appears to be technically adept. It's his signature to write in complete detail in response to a technical matters. His other signature, though, is marked by tension/escalation that derails the technical conversation. I wish he would moderate the less constructive aspects of his engagement style.
I think this GH conversation summary looks like this:
The community is in need. MLS is shutting down, and they're insisting on a timeline during which the community must coordinate. Micay is offering that the GrapheneOS project has a viable arrangement. (1) He discusses that GrapheneOS Foundation has already invested time on a plan and has already received funding and are willing to share their funding. (2) He also discusses consideration for the quality of data submissions that could benefit from other GrapheneOS projects. (3) He discusses that Mozilla might have legal hurdles in the way of simply handing off the existing data.
Someone objects to using data based on hardware attestation, and Micay addresses the concern with care, and mentions that third-party OSes (not GrapheneOS) could provide data; he directly names Google and Apple, which would significantly cover "all users." That same someone objects that attested data would compete with anonymity, and Micay replies with a strategy that accounts for privacy/anonymization with configurable levels (so as not to throw away unattested data, but still maintain privacy).
Then somebody tells him his grammar is bad a slings an XKCD comic at him in mockery. The grammar was correct, but I understood the way in which the somebody misinterpreted it as "its." The comic jab is silly because Mozilla is literally shutting down the service, due to patent (troll?) hazard, and Micay is offering a solution to work around the known problems such as that.
Finally, both Marvin Weisfeld and Micay have an exchange about technical details relating to implementation. I didn't find either response to be technically complete. Micay diverts the technical conversation and launches an accusation, and I felt it had no place in the discussion. Marvin ended the discussion right there, and I think that ended the opportunity for escalation.
