I've seen the same devs refuse to use a library because the last commit was 3 months ago, despite the library being extremely popular, battle tested, and existing for 10 years.

also and above all because it can be easily manipulated, as the research explained in the article actually demonstrates