I think you’re being extremely negative towards Anthropic here. Basically the parent is saying “this is a problem at Cursor and not Anthropic” and you’re holding them accountable.

You’re literally saying that they should not have published on the Cursor marketplace but should have used OpenVSX because that would have been “reasonable”, but I think you’re being unreasonable here.

Dworken from Anthropic here, I just want to be clear: OpenVSX was not impacted in this incident, the impacted system was only the Cursor marketplace that they host. We have confirmed that no Anthropic systems or employee devices are involved in this.

By this you mean Anthropic is now accountable to secure Elon's marketplace offerings. I'm not sure that is reasonable.