I find this defense pretty uninspiring. It spends a lot of time addressing only partially relevant questions about data custody, but then very quickly glosses over the decision to attempt to commercialize their work through a for-profit entity. There are numerous potential concerns around a nonprofit doing this, with what looks a lot like self-dealing being one of the most obvious, and the article just does not satisfy me that these issues were considered at all.