[UnFleshedOne]

I meant mostly in general.

For this particular case obviously previous packages didn't show it clearly enough. And yes, if you give thousands of 3rd party devs (or anybody snatching their credentials) direct access to your build machines or production systems, you should absolutely expect some of them to be unstable in all kinds of ways.

Insider problem is hard enough to guard against when you know the people involved.