“Developers should understand because they may encounter threats and different components here that we as security people haven't even thought about yet.”

Transcript evidence from Paul McCarty -- The Burrito Analogy of the Software Supply Chain.