Agreed with the first half, but giving up on convenient packaging isn't the answer. Things like cargo-vet help as does enforcing non-token auth, scanning and r

Agreed with the first half, but giving up on convenient packaging isn't the answer. Things like cargo-vet help as does enforcing non-token auth, scanning and required cooldown periods.