Comment by ZeroAurora

I personally treat it as a supply chain risk, as there are no longer any way to report any bugs and security problems.