Comment by dathinab

In this case no CI was involved so that wouldn't have helped.

(The CI was not compromised but a dev laptop which was used to manually build+deploy the kernel, without any CI involved).

Through generally I agree with you.