> Why should I trust open source today? Packages are routinely hacked, political message or not.

Correction: NPM packages are routinely hacked.

I've been using linux packages for two decades, and not once have they been hacked (to my knowledge). I consider those packages to be infinity more secure than proprietary packages where I and others can't check what's running under the hood.

OSS being safe and secure is one of the primary reasons why I prefer open source to closed source software.