Your first two sentences contradict with the third. How can you honestly defend a manually-vetted process that doesn't catch surface-level scams that even a Lin

Your first two sentences contradict with the third. How can you honestly defend a manually-vetted process that doesn't catch surface-level scams that even a Linux packager would catch?