FTP is fine if you have any sort of signing verifying your code. Your initial install probably shouldn't be over FTP, so that you know what you're verifying, bu

FTP is fine if you have any sort of signing verifying your code. Your initial install probably shouldn't be over FTP, so that you know what you're verifying, but it's fine for updates. The issue here was that their update pipeline was compromised and they were distributing compromised updates. Stop kneeling at the altar of PKI.