Tech-savy teenagers can pull of a “cyber attack” on a nonprofit. It doesn’t have to be a smart choice. Sometimes people just want to relieve their anger, break some shit, and claim it for whatever floats their boat right now.
The evidence is absolute bullshit though. So I don’t believe it either.
Maybe I’m just old, but I thought a distribution is literally just a package delivery basically, just like you speculated. Making software work together nicely is actually already hard enough IMO. I don’t think anything is wrong. Valid question though