I think they know what they’re doing, bit of a troll. Framed like this in the article:

Various entities, including some with security teams, revised their judgment about what Forgejo is and isn’t, which was the main goal of the previous blogpost.