Yes, at the very least, it's a no-brainer for OS maintainers who are already paying for Max 20x.

This potentially can be a supply chain attack at a massive scale.