1
There is no secure software supply-chain.
(onengineering.substack.com)
Confidentiality Integrity Availability