I feel like anyone who says "Linus was harsh but fair" never really read much of what Linus said. Many of his attacks, especially long ago, were quite vitriolic and very much not technical. Oftentimes they weren't rants, just flat out insults, short and mean (I remember, in particular, posts directed towards PaX). They weren't productive, there wasn't a brash technical take buried in them - they were just insults. Ma…
In the case of PaX, there is definitely a conflict between the later commercial concept (pay to receive these patches to a GPL2 product) and the integration of security features in a comprehensible way in mainline. Brad Spengler is right that big corporations use his work for no recompense (gotta love the cancer that is Oracle), but tbh many of the patches are hard to grok. And Linus had a ridiculous 'security bugs are just bugs' attitude, opposed to the additional complexity added in some patches. I think many of the mitigation techniques are painful and have ramifications on many other areas -- but the larger redesign just wasn't being done. And they are both ascerbic individuals.
I thought his rants directed at Kees Cook were worse. He is allowed to reject everything insufficiently tested, so why doesn't he just do that? Anyway, Kees was a model of restraint.