“What's reasonable telling someone that you can't have critical vulnerabilities in your project or in your product? it's not reasonable because back on the software supply chain they take in a They use a component that's critical to the functionality of whatever it is that they're selling whatever their products”

Transcript evidence from Kyle Kelly -- The Dumpster Fire of Software Supply Chain Security.