Except Debian is notorious for breaking OpenSSL's security by "helpfully" removing code that provided entropy for keys without understanding why it was there (C

Except Debian is notorious for breaking OpenSSL's security by "helpfully" removing code that provided entropy for keys without understanding why it was there (Chesterton's Fence): https://lists.debian.org/debian-security-announce/2008/msg00152.html https://lists.debian.org/debian-security-announce/2008/msg00... So no, for something security-specific like KeepassXC, Debian maintainers do NOT get the benefit of doubt.