Most users of dependencies will never consider whether to trust those dependencies at all. If you’ve considered the problem and decided to trust them as a comp

Most users of dependencies will never consider whether to trust those dependencies at all. If you’ve considered the problem and decided to trust them as a compromise to reduce staffing and costs, that’s a fine outcome in my book. How many health/medical startups are blindly trusting dependencies today, having never thought through the harm I describe?