thought experiment: how would you stop malicious dev actors at scale?
Discussion
It's a good question. Provable builds would be nice. Updates should obviously be optional. Ultimately I like a web of trust model where my follows can rep that they've not experienced problems with a range of releases.