But I haven’t. So let’s work off of that - expecting the entire internet to read the personal blogs of open source contributors before deciding which packages

But I haven’t. So let’s work off of that - expecting the entire internet to read the personal blogs of open source contributors before deciding which packages or modules to run is…not really a solution to the problem you’re putting forward. Is it?