lots of talk today about open source supply chain vulnerabilities and obviously that is a very real problem, but I would think that's hard-mode.
if you have nation-state level resources, getting a few of your people in the door at FAANG companies seems way easier than this