Yes of course we need to defend against scammers at multiple levels because none of them are bulletproof, so putting too much trust in individual developers als

Yes of course we need to defend against scammers at multiple levels because none of them are bulletproof, so putting too much trust in individual developers also a problem here. Even if they didn't get hacked, they could have just become the hacker themselves.