That's a hypothetical example based on the assumption that someone malicious could make any change, which they can if they can implant the right malicious feature into the right package upgrade. There are all sorts of ways they could prevent further Trisquel upgrades from fixing the problem, up to and including blocking further access to the official repo.

Reply via email to