Well, companies used to have employees write code, rather than stitch together random garbage written by random dipshits who could be tricked into using loose licenses. That's one cause for concern.
> Open source won because everyone worked together.
No, ``open source'' has ``won'' because it helped corporations defang Free Software and get gratis labor.
> Supply chain security will happen because everyone works together. If you try to do this alone, you will fail.
This isn't food, but perfectly uniform applied mathematics. There's no ``working together'' with corporations. Doing it alone is the only reasonable option, which means aggressively reducing the size of this foul shit is necessary.
> Thank goodness others had the foresight to create our current SBOM formats.
Yeah, MicroSoft totally *<3* ``open source'' guys.
> Long ago all the software supply chain work was done by hand.
Oh, right, all of this new security theatre is always about trust and reputation, and not trusting those disgusting lone programmers such as me or other silly things; it's always really about doing anything but truly auditing that yucky code.