alt Hacker News> When negligence is so bad that it looks like sabotage from a hostile agent
It doesn't though. There's no actual evidence for anything beyond negligence. The "sabotage" angle is just speculation in the vain hope that surely people this stupid don't work for the US government.
We doesn't need a signed affidavit on GitHub to trigger an investigation.
This already crossed the line of reasonable suspicion. The investigation is where evidence gets collected.
Who knows what other improper behavior these people have engaged in and what other secrets they have leaked, intentionally or by side effect.