Why does an open source project need to lure new users? Especially at the expense of limited dev time when there are actual security features in the issue tracker?
"Why does an open source project need to lure new users? "
To get some traction and momentum to actually become a serious alternative. New users can also mean new funds and not just more work(like it should be), like for example the blender foundation is proofing that this is possible. Make something that really works and once some actual buisnesses are using it, there will be ways for funding it.