@jackwilliambell the way I minimize this risk is by asking where nation states might poison the software pipeline, what artifacts would result if they did, and how likely it is those artifacts would be noticed. A web browser is a high value target but the oversight on a small, minority browser will be less than builds from the Debian or Mozilla motherships.

0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/mcc/statuses/114870199433460744 on your instance and quote it. (Note that quoting is not supported in Mastodon.)