Agreed with this, but I suspect the problem is no one's really sure how you react to things like this. There's no centralized body or medium for "out of band" issues - it's kind of the nature of open source.

I would say it does speak to the need for community managers, but again, a difficult ask for OSS projects. Who, when, how and what powers do they have?