Glad to see pushback in the comments of the Chainguard CEO's explanation post on LinkedIn, after they broke embargo for the PHP fixes yesterday:
https://www.linkedin.com/feed/update/urn:li:activity:7518756994284077056/
I've been frustrated by Chainguard before when moderating the /r/opensource sub, due to their CEO's repeated attempts at marketing via scare-mongering news articles. which just so happen to feature Chainguard.