[theodric]

Not diving into the debate about whether this is a useful change, but I do want to push back on the notion that this "costs you nothing." It costs effort, which means it costs billable hours, and therefore money. The question is if that spend pays dividends.

[richbell]

It also creates downstream impacts. Reddit famously had a major outage caused by this; my team had all of our builds break because a transitive dependency changed methods from "blacklist" to "allowlist".