Don't forget helm charts and docker containers. The security/assurance of that supply chain is pretty lacking. It feels like some people are actively applying

Don't forget helm charts and docker containers. The security/assurance of that supply chain is pretty lacking. It feels like some people are actively applying the (historical?) Wordpress security model to Kubernetes for expediency.