[Spooky23]

You’d probably feel differently if some developer at the IRS compromised your identity because he used some compromised library to avoid internal processes.

Security, public trust, etc requires controls and audit to deliver. You don’t want a startup “fake it till you make it” mentality in government or banking.