The KeePassXC kerfuffle

There's a difference between disabling networking that does things like favicon fetches, and disabling so much networking that it can't even communicate with a hardware USB encryption token.

Turning off the 'look pretty' network features in the default install is all well and good, but disabling things like hardware security token support because they ripped out the entire networking suite blindly is a dis-service to the users.

PGP broadly failed because it was so obtuse, there's a certain degree of lubricity you need with security features to make them well used. And this blind 'chop the whole forest down' approach I think overstepped.