But then it turned out that the resource he is concerned about is developer goodwill

I think he's concerned about user goodwill (to comply with "annoying" security stuff).