[biggusdickus69]

Not necessarily, some supply chain compromises are detected within a day by the maintainers themselves, for example by their account being taken over. It would be good to mitigate those at least.

[cmckn]

In that specific scenario, sure; but I don't think that's a meaningful guardrail for a business.