A thing I'd now wonder is the social part of it as I guess I'm not the only one who'd rather not continue using tukaani's implementation of xz/lzma.

And another thing I wonder, the bug mentions OpenSSH but uuh… is it even supposed to use xz? I don't see it as a dependency here, runtime automagic?