I get where you're coming from. I highly respect this project for its privacy push and it's sadly a good example of "not all issues have the same priority".
I honestly can see them just not being able to handle the business risk of a full employee would bring or several other reasons why it's "okay" from their perspective. I now basically have to choose between two subjects that I find important.
For me I came to the conclusion that I still wish them the best - I can't hold them to a standard ass high as the corporate world personally, let alone one higher.