Conversation:

@pixelfed Let's call me a killjoy, but here is an idea of a security posture: letting fellow developers and infosec folks have a look at your code and software in small and/or testing environments before you organize a much hyped upgrade event and have the same unreviewed code handle pictures and data for thousands of users.

Still unhappy that you are not releasing a single line of the code I guess.