Comment by amelius

It also won't help with supply-chain attacks. Executed by e.g. a state actor who is playing the long game.