There’s several stories of open source projects being handed off to someone who seemed helpful, only to have them turn around and add malware months later.
I completely understand a desire to shut things down cleanly, rather than risk something you watched over for years become something terrible.