Its a small team and those are mistakes. We can find hundreds of examples of major companies with IT teams in the 100s making those same mistakes. The solution was figured out by the team and fixed. The original version of that GH page that most people remember was much longer but its been significantly reduced as most of the claims were disputed and the author had to reel back their claims or remove them outright. Now whats left is just a few pedantic complaints.
With arch they make those mistakes less but they shift a lot more configuration onto the user and when those mistakes get made they dont need to take any blame because it was the user who made the mistake. Arch has pushed updates that have broken bootloaders how many times? I’d consider that to be catastrophic failure on any distro except arch where i think its fine as the user should be able to fix their bootloader pretty easily.




So you basically hold them to a higher standard than google, apple, Microsoft, cisco, Amazon. Because theyve all had outages cause by certs expiring.
Its a common issue and its not a huge deal. The package manager cert was a big outage but their wiki website cert is the most minor shit ever.