s/harder/more difficult

hardening supply chain attacks is probably not the goal here