Comment by blamestross

"Just wait 2 weeks to use new versions by default" is an amazing defense method against supply chain attacks.