You have perfectly put into words, all my thoughts. I have been thinking about ways to secure myself, as it is exhausting to think about it every time there is

You have perfectly put into words, all my thoughts. I have been thinking about ways to secure myself, as it is exhausting to think about it every time there is an update or some new dependency. After this attack, I think the only sure way is to unplug the computer and go buy goats. The next best thing? Probably ephemeral VMs or some Codespaces/"Cloud Dev Env thingy". (except neither would save me in the xz case)