Yeah the ntpsec story, not great. I don't believe they're taken especially seriously. There are people close to Harlan Stenn who believe the project is essentially fraudulent.
An ntpd-rs contributor elsewhere in the thread suggests ntpsec is used by many distributions, and suggests donating to ntpsec (amongst some other organisations).
It’s fairly limited: taking over maintenance for popmail or forking NTPSec certainly isn’t nothing but his reputation is built on the Cathedral and Bazaar essay getting attention at the right time in the 90s when open source was really taking off and his subsequent OSI work. I’d wager that an order of magnitude more people heard about fetchmail from his writing rather than the other way around.
That’s not to say that his open source projects aren’t useful, only that there are thousands of other developers who’ve done work of similar scale and adoption.