I don't believe the coldcard error was malicious either, however, I think that there is some distinction to be made in that coldcard sold a product for the express purpose of securing people's keys, while libbitcoin is a node project, a function of which was used in a training guide that was not published by libbitcoin. 

but it was definitely handled poorly by Voskuil.

It's extremely similar to the coldcard error. The handling was poor.

optimism

I always found the milk sad thing to be a case of miscommunication more than anything else. It did not read as malicious to me.