No, I don't know him. Seems like some dude in Germany 🤷 But a XZ like supply chain attack seems unlikely at the end of the supply chain 😅

They claim in their roadmap that they want to commission a security audit at the end of this year though.

In general I agree that it is good to be a bit sceptical of a fork appearing like that, but from what I gather from looking at the open upstream PRs, I am not overly surprised that people feel forced to make fork by now.