Oh really? You read the entire codebase of a project before downloading it, and every time you update it, you go over every single change like you’re the Greek God of code review? Because if you’re not, by your own standards, you’re opening yourself up to “additional attack vectors”