I’m glad there was at least some pause. However well-intentioned, the dot org team should realize that it is not a good move. Let me illustrate:

I have JetPack and iThemes Security installed. Both have security features. Perfectly normal. Who gets the #1 spot when I search for “security”?

I would suggest that the friendliest thing the JetPack team could do is to totally disable the promotion injection until the dot org team adds a guideline for it. Otherwise you’ve forced the dot org team into reaction mode.