He was basically, 'it's a feature not a bug'. And 'it's expected that people using this library know about security.' Which I guess doesn't include him because his own example was vulnerable.
Madness string 96035
It is akin to scripture, in that somewhere in the labyrinthine mess of rules, you can find support for almost any position.