Seems this could have easily been avoided if people used their PGP keys and signed contracts that detailed the scope of the transaction.