Package registry maintainers do often do some things that make it a bit safer than just using things from a random person online: e.g. preventing someone from d

Package registry maintainers do often do some things that make it a bit safer than just using things from a random person online: e.g. preventing someone from deleting a popular package, which would enable various sorts of squatting attacks. But, you’re generally right.