You're not actually "fixing" anything, you're just passing the ball of shit down the responsibility chain to the ops/infra team.

Which is fine if you work in a large corporation where this is a valid strategy.

Unfortunately though the software supply chain problem is a) very difficult and b) unavoidable.

Nix is the best (or maybe only) attempt to solve this problem with programmatic (vs organizational) tooling.