The ZCG has done incredible work under tight constraints.
I don’t believe the ZCG bears any of the blame. It is not feasible for our community to expect them to vet deep technical details that might be nefarious. We as a community share a responsibility to support that work.
Why didn’t the protocol engineers who were aware of the issues reach out to the ZCG?
The onus must be on those who are aware.