I think part of it is how the malefactor broke the trust of open source community.

Another part of course is how they refuse to acknowledge that anything they did was wrong.