So, ACF injected notices into everyone's dashboards to push their own legal agenda. It’s a move that reeks of self-interest more than community benefit.
While everyone’s ready to grab their pitchforks at Matt, this actually sounds somewhat reasonable. Still, given its impact, this could easily be seen as a breach of trust. Definitely a move that's going to stir the pot.
I believe you may have the story confused. Please correct me if otherwise.
WordPress was the one who injected notices into everyone's dashboard. This started because the WP dashboard shows the blogs from wordpress.org, and then they published this post: https://wordpress.org/news/2024/09/wp-engine/
The result was WP Engine removing the widget that shows wordpress.org blogs on their installs.
Assuming the notices are real and a problem, Automattic should cite that instead of making it about security issues. As it stands, that's just a claim.
While everyone’s ready to grab their pitchforks at Matt, this actually sounds somewhat reasonable. Still, given its impact, this could easily be seen as a breach of trust. Definitely a move that's going to stir the pot.