We can improve security via updating the C++ language forever, but the threat remains in the package management, and I couldn't find that discussion in this article.