> Why is this happening? The author does not really explain the why, but gives a solution in that paragraph. I think the major reason why "overlay package mana

> Why is this happening? The author does not really explain the why, but gives a solution in that paragraph. I think the major reason why "overlay package managers" exist is simple: Time. With current speed in design iterations, CI/CD, etc. time is the important factor. And as such a separate review process takes up that time (and binds considerable amounts of manpower). But I agree: These package managers ran into a problem when they traded security for speed.