Comment by Zambyte

3 hours ago

You trusted the PHP fix from the PHP devs because you trust PHP. That's my point. You didn't wait for Apple to bless it. It's not reasonable to consider Apple to be a universal arbiter of software.

But thats my point, I trust PHP in the same way that I trust the apple cert process. For the most part implicitly and by reputation.