One thing I hope every developer takes from the xz situation is that, if someone attempts to shame and badger you into accepting patches on any project, the answer should be, "If you are having trouble finding the 'fork' button, I can send you a screenshot."