Supposedly wonderful “human artisanal code” has plenty of fuckery.
These are supply chain attacks and in the case of xz utils, the attacker had gone to extreme lenghts to hide the attack from a well-meaning, good-hearthed but overworked and burnt out solo maintainer.
To compare this to bugs that people unwittingly introduce in normal human-written code is not sincere.










And the fact how it is used in practice, actually, in reality, is the very dark grey that some people call "black" for better clarity. The fact that you can use a large butchers knife for practical things does not mean that entering a primary school with one is the right thing. What are the actual intentions for grabbing that tool?