I mean, it's likely not just deflection/paranoia in his case.
Anyway, it is a good alarm signal about open source (especially after npm and xz).
In the end we are all amunition. /s
With what's been going on in the world and with Russia, it really doesn't. That's the thing.