&gt; So you expect other communities to review all code changes?<p>No. Third parties would be just a barrier against odd updates that don&#x27;t hit everyone. If update starts hitting everybody then it&#x27;s probably harmless because everyone is getting it, if it appears just at 10 clients then it&#x27;s probably a backdoor.