OK, this is one of those times where infosec people get annoyingly close to "appealing to authority." This. It's not just "close to" appealing to authority, it

OK, this is one of those times where infosec people get annoyingly close to "appealing to authority." This. It's not just "close to" appealing to authority, it's straight up appealing to authority. And yes, it's a common practice in the infosec community. The whole security industry is built on a reputation system. It pays to remember that the number of exploits and vulnerabilities etc. in commonly used software that are reported on practically a daily basis came out of the same reputation based system.