I teach and one of my students, with little IT experience, asked me last week about the security of package management. I found myself using the many eyeballs a

I teach and one of my students, with little IT experience, asked me last week about the security of package management. I found myself using the many eyeballs argument. It only takes one set of bad eyeballs. It seems to me that down through the years ease of deployment trumps security. npm, mongodb, redis, k8s. Or maybe sysadmin has just become outdated? Maybe front of house still needs a grumpy caretaker rather than your friendly devops with a foot in both camps. We can now even outsource our security to some impersonal third-party so they can 'not' monitor our logs. EOG # end of grump