Three key learnings for AppSec teams from the XZ backdoor | Hacker News Reader