This. Most things are operated in an honor system. Take npm as another example, in a large corporation, any commercial product that relies on third-party npm

This. Most things are operated in an honor system. Take npm as another example, in a large corporation, any commercial product that relies on third-party npm packages will have to survive a long legal audit process.