Correct. We see less security issues w/ distro packages because they have better best practices, do more curation, and generally have more specialized xp doing

Correct. We see less security issues w/ distro packages because they have better best practices, do more curation, and generally have more specialized xp doing this sort of thing. I remember an lwn article about Debian maintainers managing PGP keys a while back which was interesting- https://lwn.net/Articles/734767/ https://lwn.net/Articles/734767/