It would be nice if OSS maintainers would start charging for extra security features like signed releases at least $1k/y per project.