Yup to all others you mentioned. I usually just teach about why trust matters and how to think about it as a developer. Works out well with training the devs at my current workplace. Back to your comments on the CVEs, the reason I replied the way I did was because your comments appeared to come across as being the only necessary mitigations per-se. I know that&#x27;s not at all how you intended it (&quot;some comments&quot; as opposed to &quot;how to mitigate&quot;), but my first pass over the text made me feel that way about it.<p>In any case, nice chat. I like productive exchanges.