Surprised there's no mention of the recent XZ exploit. Would really have gone a long way in provided a real world impactful example.