To add to that, the key takeaway is that they conveniently just shrug such risk off, because the alternative is more work they don't have capacity for. I mean,

To add to that, the key takeaway is that they conveniently just shrug such risk off, because the alternative is more work they don't have capacity for. I mean, it's not like dependency package injection have been proven to be a good way to hack back doors or anything. /S P.s.- as a non contributor, I know I'm being a bit dickish. The truth is these researchers proved thier point in spades and no one wants to admit it. I