A chain is only as strong as its weakest link: * developer wants compensation * browser gallery has no resources * users has no time to audit Why as a user

A chain is only as strong as its weakest link: * developer wants compensation * browser gallery has no resources * users has no time to audit Why as a user of Linux distribution I feel safer than installing extension? I asked maintainers, they have no answer, they don't perform audit. What if push to the gallery and update automatically is bad idea? I mean in Linux distribution maintainers pull updates, they test it and push to stable. Each distribution can block update, it makes sense for author and maintainers to easy update with reproducible builds, source version control. Distribution may audit application - it is much simpler than audit by each user. Distribution may patch application to its standards. In theory authors and maintainers can be bought, in practice it is much harder. And by itself this reduces pressure. So I believe gallery should be split to trusted and others. And browsers should allow alternative galleries. I have a few extensions I trust. What do you think?