>What if the maintainer is unemployed? How many actually existing maintainers in particular of security sensitive parts of open source projects don't have at l

>What if the maintainer is unemployed? How many actually existing maintainers in particular of security sensitive parts of open source projects don't have at least some record of employment or education, a modern passport or national ID with eID features, some other comparable form of identification or at least say one reputable person in the community who can verify they are who they say they are? Are we seriously pretending the standards that exist for ordering a beer in a bar can't be met for software security that literally billions of people depend on?