I think the recent compromise at matrix.org [1] is a good example of how better defence in depth could have mitigated the damage done by an attacker who comprom

I think the recent compromise at matrix.org [1] is a good example of how better defence in depth could have mitigated the damage done by an attacker who compromised a trusted machine. Specifically, access to a developer's SSH agent was the critical privilege escalation vector in this attack. [1] https://github.com/matrix-org/matrix.org/issues/371 https://github.com/matrix-org/matrix.org/issues/371