> What happens when that person gets bored with the project... or decides to do something malicious (as in the case with a recent backdoor in the XZ compression

> What happens when that person gets bored with the project... or decides to do something malicious (as in the case with a recent backdoor in the XZ compression tool)... The maintainer of the xz compression tool didn't do anything malicious. This statement is incorrect and damaging.