What Simpson did is irresponsible. How many sites are out there with the compromised version of the plugin that will NEVER get updated because he decided to take his ball and go home?

Once your plugin is out there you have a responsibility. That responsibility is that your plugin does no harm, and if it does you fix it ASAP. Storming off in a huff because someone hurt your feelings just screws your users. I USED to use this plugin on all my clients' sites with CF7 installed, but will be looking for alternatives.