Goodharts law: "When a measure becomes a target, it ceases to be a good measure". Clients, open source or not will have their WOT metrics known or approximated which are now targets to optimize.

Whatever the system that is constructed to keep bad actors away is, its its still a proxy for human trust which is fallable.

Sure I trust myself for most of my curation, moreso with a WOT. However I would like to be signaled and not encounter known bad actors encountered by my community/s.

Considering the long game strategies and the long history of inciting intra group division and then letting them destroy themselves from the inside out. Can we solve it completely? No, but we can build robust tools to help guard against it.