You really can’t blame developers for wanting ease of use when it comes to software and tool/library installation. At the same time it is incumbent upon people

You really can’t blame developers for wanting ease of use when it comes to software and tool/library installation. At the same time it is incumbent upon people at all levels of the chain to make sure that security (and effective tools for managing it) are part of the mindset as well as the process.