I think that is a harmful generalization and feeds on itself (more distrust creates more security measures which creates more the feeling that you need to secure yourself against this threat).
They are very open about it and I don't see any problem with it. You could find some issues with them running a cloud software like that, but given that they primarily produce tools that are largely open source it is not a problem in my mind.
Here is an article about their operations in Prague (in czech), from what I understand they have most of developers in St petesburgh..
The guidelines also say: "Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith."
In this case, assuming good faith would be assuming that @ordx is stating a fact that they're aware of, not trying to stir up controversy. If you were interested in finding out how they knew that, you could politely ask them what their source of information was, without implying that they have ulterior motives.
