pull down to refresh
I honestly think that a binary release from core without source code would never be installed (or at least, will be fiercely opposed) since the attention is at peak. Probably it won't even make to the github releases. Node runners i think do care about this stuff.
reply
BTCPay is owned by a non-profit.
Core Lightning is a Lightning node, which is also a "proper" node (although not Bitcoin directly).
In general, I highlighted these two examples of (in my opinion) wrong handling of security issues.
I believe for Bitcoin Core, it would be even more important to release source code alongside binaries than for these "less important" projects, because it's what the entire network relies on.
Not publishing the source code for that could allow maintainers to secretly hard fork the network without community consensus.