But thinking about, this might be a new danger to get us into another xz-utils-situation. The big malicious actors have enough money to waste and can scale up the amount of projects they attack and hijack, or even build themselves.
I'm equal parts frightened and amazed.
Maybe it's time to stop being "frightened and amazed" and come back to reality.
I'm hearing this exact argument since 2002 or so. Even Duke Nukem Forever has been released in this time frame.
I bet even Tesla might solve Autopilot(TM) problems before this becomes a plausible reality.