Hey I know it sucks when someone isn’t nice to you, but that person is about as right as can be.

Just a month ago thousands of malicious commits discovered on git made the news. Unaudited repositories are a huge vector for attack and have been for years.

If that person seems pissed off you could chalk it up to hearing about this stuff on newsgroup discussion two decades ago.