So how do we prevent this? Not everyone can cryptographically verify software updates, like I can't expect my mom to do that, and that is assuming you can reliably determine which key to use for verification in the first place, and that you trust whoever owns that key, and that this signer properly checked all commits or trusts the people that did.
Perhaps a start would be not to keep more than, say, a fifth of your cryptocurrency in a single place if you have many millions' worth?
Perhaps a start would be not to keep more than, say, a fifth of your cryptocurrency in a single place if you have many millions' worth?