The major point is WHY should anyone have to see something they don't want to? And minor point is, seriously, this is like an hour fix if they wanted to.

I'd be careful saying "this is like an hour fix" and then attributing it to malice, unless you work there. It's like saying the "unknown or expired link" message you get on HN is "like an hour fix...if pg wanted to" and thus pg hates us.

The point is that it's actually a fairly minor interaction issue that hasn't caused any major problems until now, and while we can't know why they haven't fixed it, it's probably because they just hadn't gotten around to it yet.

Most of the malice comes from a YC startup who is playing in a space where customer trust is essential.

Here's to hoping they beat on their front-end guy and whoever else thinks this shit is funny before their employee makes it trivial for established competitors to destroy their professional credibility.

Actually, we haven't determined that there is any malice whatsoever. In fact, you seem to have created an account just to perpetuate that falsehood.

also github is not a YC startup

It's probably more than an hour fix, depending on how they did it. Remember that it is more usable to just let people add someone else without a confirmation. They'll have to add a confirmation on the other side, or a block mechanism, which is a different workflow.