Comment by 9cb14c1ec0

> What happens behind the scenes is that DuckDB downloads an extension binary

The baser part of me wonders how hard it would be to compromise that supply chain.