Grown-ups do not conduct supply-chain attacks. However this ends, I will not be building on WordPress moving forward without a serious governance overhaul.