The whole situation is a joke really when it comes to stuff like this. Everyone crows due diligence and removing administrative access and putting in security

The whole situation is a joke really when it comes to stuff like this. Everyone crows due diligence and removing administrative access and putting in security controls everywhere, not using own hardware, having locked down this that and everything, centralising control and environmental access. It adds a lot of friction but realistically ignores the fact that some of the core libraries and packages our products depend upon are probably put together by someone toking on a bong at 2AM in an insecure rural outback shack on a laptop riddled with porn and warez that was bought from ebay.