Yeah; I tend to agree. Refund to those of the whitelisted who request it would prove it's not an inside job. Tokens should be given to the rest (including those who sent to the "wrong" address).