On: Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Packages

[jl6]

The endgame is to generate a binary image for an entire single-purpose OS/unikernel that does exactly and only what you require of it. No source to open or close.

[ianburrell → jl6]

The build process is just as vulnerable.

[jl6 → ianburrell]

Sounds more midgame.