Homebrew also takes a wikipedia style approach to package maintenance where any of hundreds of unvetted internet randos can push any unsigned changes they want

Homebrew also takes a wikipedia style approach to package maintenance where any of hundreds of unvetted internet randos can push any unsigned changes they want to all users of that package with no review. When you install Homebrew you are literally granting access to virtually anyone remote access to your laptop. Any security leaders in an org that allow Homebrew on workstations used for anything remotely sensitive should be fired. I have been restricted from disallowing it at some orgs, which is my cue to leave before a major supply chain attack is blamed on me.