Coming from software supply chain, I am excited to see such a cracked team handle this problem and I wish we talked more about this in FOSS land.