I don't believe the coldcard error was malicious either, however, I think that there is some distinction to be made in that coldcard sold a product for the express purpose of securing people's keys, while libbitcoin is a node project, a function of which was used in a training guide that was not published by libbitcoin.

but it was definitely handled poorly by Voskuil.