So, besides the usual quarrels that are very common in FOSS development, you raise an important point, my understanding is that you do believe that these PRs introduced vulnerabilities to certain attacks.
The fact that the PR is merged doesn't prevent you from proving your point, so, if you can simulate these attacks in a real world scenario, as you proposed originally, I suggest you do that and show the results to the public, you will get much more people on your side then.
That is on my todo list, like still working on the mitigations and disclosure of any other bitcoin or lightning security vulnerability that could be still of my knowledge. Like it has been the case very consistently since beginning of contributing on rust-lightning (now LDK) in 2018 / 2019.
reply
you will get more people on your side then.
And more credibility.
reply