> “The existence of such channels, shows that trusted individuals can easily infiltrate the project, and secretly introduce malicious artifacts” That is like s

> “The existence of such channels, shows that trusted individuals can easily infiltrate the project, and secretly introduce malicious artifacts” That is like saying that trusted code can easily do malicious things. Of course trusted people can do bad things, that’s why you have to trust them. Even so, source control history means that a trusted person should be found out if they introduce malicious artifacts.