[jl6]

The endgame is to generate a binary image for an entire single-purpose OS/unikernel that does exactly and only what you require of it. No source to open or close.

[ianburrell]

The build process is just as vulnerable.

[jl6]

Sounds more midgame.