i understand, poor wording on my part, any good resources?
Discussion
Not that I know of. But it's as simple as that, changes to BTC Core repository must go through code reviews and only Core devs can commit the changes, and people that run the nodes must update to that version. People can also create a different implementation of Core but the same applies, people must choose to run it.
Thank you, I've relayed this but it wasn't enough for them to feel secure.