The Responsibilities of an Open Source User

I'm perplexed there are still projects hanging on to SF after the malware-embedded-in-zip-files, the ad-foo and the rest of SF's track record...