It's a complex situation, I believe.
In one extreme the project creator is beholden to no one and decides what measures should be taken. But they are to an extent beholden to the wishes of any creators they have involved, and should probably listen to them, lest the smoke of burning bridges...