> There's tons of ways for a malicious party to sabotage source code. If the malicious party has unfettered write access to your source code, then sure. But if

> There's tons of ways for a malicious party to sabotage source code. If the malicious party has unfettered write access to your source code, then sure. But if all changes get reviewed by a maintainer before being merged, then there's way fewer ways, and Unicode attacks are a really large portion of them.