@filippo i was replying to your dilemma in the last statement. im saying err on the safety of your community, always. if they can't follow code or conduct, they can't be permitted in your users' presence. even if they report valid security concerns, it's always from the lens of their worldview and you should weigh that when triaging

@filippo that person should understand and rectify their behaviour, or else it's an indication of their poor judgment and values, in which case i wouldn't trust them with my users' security at all