> But if we cannot institutionalize a more careful process, we will continue to see a lot of bugs and it will not really matter whether they were inserted intentionally or not.

I've always known this to be the case with many FOSS projects. (Remember the Heartbleed bug?) I'm a little surprised it's an issue for something this critical that's used by all of the world's largest technology companies, including all of FAANG.