0. Whatever we do, we must treat new contributors substantially the same as existing contributors.
Someone who got approved for creating full projects a decade ago (like me) aren't necessarily any more versed in best security practices or what modules are already available in Drupal 8. And a long-dormant user could easily have had their Yahoo account hacked, etc.
I want a whole new system that treats old-timers the same way as newbies, but a bottleneck at the
Therefore in the short term i'm pushing to add more people with the power to give people Git vetted user status. In particular, to give kattekrab the power to give people the power to approve project applications and to know the existing people with this permission to ping when there's a backlog.