Then they should’ve included a short TLDR even harder

TLDR: Open package repositories without some approval and oversight system, like AUR, will have even more problems in the future due to advanced coding AI and malicious foreign hackers.

Edit: Please normalize TLDR’s on bot posts with just a link.

Second this and adding: Fiduciary responsibility and how US economic law places it above all else. Other jurisdictions, particularly in Europe, require companies to balance multiple responsibilities, such as towards their workforce, societal, ecological, and yes, fiduciary, too. It doesn’t solve all issues and can be vague AF, but at least well-meaning CEOs can fall back to these other corporate responsibilities in court while the same CEO would be sued into oblivion by US shareholders.