I hesitate to go any further, though, because several projects have survived despite doing things that seem really really wrong.

Is there actually a single, well-known example of an open source project that did things right? I can't think of one. Everything I've seen indicates a moderately distributed brute force method. Not that there's anything wrong with that :).