Comment by chickensong

> the risk of supply chain attack on the nix cache

Do you not trust hydra, the infra hosts, the people, all of it? What could be done to improve the cache's posture?