My takeaway from the xz thing is this: never write software that anybody but you might want to use for anything.