 Well, really, until people put the right sort of security practices in place, these issues will continue to happen. A lot of the open source community has pretty robust ways of dealing with this. There's things like software attestations, better protections around software signing and rollback protection. All of these types of things are exactly the types of things that they should have been doing.