The Xz story from [last month](https://simonwillison.net/2024/Apr/5/everything-i-know-about-the-xz-backdoor/), where a malicious contributor almost managed to ship a backdoor to a number of major Linux distributions, included a nasty detail where presumed collaborators …
Emphasis mine.
A software economy based around sharing and openness is not compatible with whatever the fuck you want it to be. If you want decent, secure software, provided for free, then be a decent human.