The author seems to make good points but they lack risk assessment intelligence. Software security’s risks are technically challenging to exploit and require la

The author seems to make good points but they lack risk assessment intelligence. Software security’s risks are technically challenging to exploit and require law breaking. If you’re working for a crypto exchange, then maybe this is an issue for you. Even in that case, it’s way more likely that someone will fall for spear phishing then importing a JS library would result in being hacked. It’s important to consider the statistical likelihood that your vulnerability will be exploited when considering security.