I have seen attacks along the lines I just outlined and well beyond in my industry many times. A wildcard TLS cert or an SSH host key in plaintext is a loaded

I have seen attacks along the lines I just outlined and well beyond in my industry many times. A wildcard TLS cert or an SSH host key in plaintext is a loaded weapon laying around and it will be used on a high value target. Sad fact is most of the companies that hold billions of dollars of customer assets do development exactly the same way a gaming company might. Those that even attempt security are unicorns. They bank everything on things like DNS, BGP, TLS certs, and ssh host keys working. This is like the medical industry before they learned hand washing was a thing. I teach every one of my clients how to do things like commit signing, but for every one I help improve there are 100 more on track to be hacked any day now. I can totally forgive a startup that cannot afford senior security engineers for a mistake like this, but Microsoft can afford that, or at least consultants, and yet they can not even enable optional signing for NPM, properly enforce git commit signing, or even protect an ssh host key trusted by millions in a TEE or HSM.