I'm not so big on benefit of the doubt when he keeps doing stupid shit, but as you say information about a *security* update should never be behind a pay wall especially when he's trying to sell mastodon as an alternative to closed walled garden corporate social media.