I felt the writer implied open source code was a bad/insecure thing, since they downloaded a zip file from some WordPress upload folder. I'm guessing the code was being made available to companies that "legally" obtained TM-SGNL.

His repo, not theirs: https://github.com/micahflee/TM-SGNL-Android/commits/master/

He points out that "You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy."