Counterpoint- if anything malicious was involved, it would have been easier to just seize control over the login to the previous maintainer's github.
Yes, obviously anything genuinely malicious, like ZippoApps buying Simple Mobile Tools, or Lennart Poettring seizing control of udev, must be rejected, but there's no real evidence of this here, just a bunch of fags from the syncthing community panicking because someone who refuses to dox himself and be a puppet of NATO like nel0x controls the repo.