i don't think the core problem here has anything to do with trust to be honest. The problem here os developers using so many external packages and code and libr

i don't think the core problem here has anything to do with trust to be honest. The problem here os developers using so many external packages and code and libraries for their projects; commercial or otherwise. them just having to ho on trusting everything by default is just one of the many side effects of that.