how is that automatic if you need the checksum of the backdoor?! automatic here means that code written prior to the existence/knowledge of the xz backdoor cat

how is that automatic if you need the checksum of the backdoor?! automatic here means that code written prior to the existence/knowledge of the xz backdoor catches not only this specific attack, but the entire class of such tarball attacks.