“You need to monitor the changes, the new best practice, and make the effort to go in the settings and to follow the recommendation.”

Transcript evidence from François Proulx - Arbitrary Code Execution 0-day in Build Pipeline of Popular Open Source Packages.