I don’t think A PR is the only attack vector. I would be suspect of the entire CI/CD pipeline and any production systems or distribution systems in employed
So "evil PR" would probably be the easiest thing to catch, and it definitely seems like other compromise vectors are where the real danger is.
public function rot13_GbgnyylAbgNOnpxqbbe()
Something subtle like that?Fwiw the UK has near identical legislation and I'm pretty sure the Aussie gov looked at ours first.
We lead the world in subtly corrupting democracy.