The problem is that a sole maintainer was able to shove code all the way into distros. You can vet people all you want, it won't prevent these issues as long as

The problem is that a sole maintainer was able to shove code all the way into distros. You can vet people all you want, it won't prevent these issues as long as we all run code, which has never been looked at by a second pair of eyes. Same reason why commercial planes always have two vetted pilots in the cockpit and ATC watching their every move. People can and will do malicious shit, if their mental health declines.