On one hand, I agree. On the other, this does feel a bit whatabouty. Because yeah, you can’t check the kernel code, but you can and should check the code of di

On one hand, I agree. On the other, this does feel a bit whatabouty. Because yeah, you can’t check the kernel code, but you can and should check the code of direct dependencies. Not every time you do anything, but certainly whenever there’s something to be feared. Running code against untrusted inputs from the Internet is one of the few places that would justify “reverse engineer the kernel to make sure it’s safe” levels of concern, in the right conditions.