i'm not a linux apologist but i wonder if this really says anything specific about the kernel "team" that can't be more broadly applied to any open source project. i read a comment from someone that basically said: this is just a laborious way to prove that, given enough time and energy, malicious code can make it past review.