In time it may become a trade-off between new (with associated features and speed) Vs tried and tested/secure.
To us now this sounds perverse, but remember that NASA generally use very old hardware because they can be more certain the various bugs & features have been found and documented. In NASA's case this is for reliability. I'll concede 'brute force' does add another dimension when applying this logic to security.

This may also become an AI arms race. Finding exploits is likely something AI could become very good at - but a better AI seeking to obfuscate?

How long until US bans code from developers with ties to CN/RU?

That won't happen because it would effectively mean banning all FOS which isn't remotely practical.

Mobile friendly version:
https://m.xkcd.com/2913/

Edit: I noticed OP put the alt text in the comment after I posted this

A good summary here: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

It's relatively quick and easy to fix if you have a live boot Linux usb stick ...and probably a second machine so you can Google what to do. It's just also rather worrying at the time.

I really wish Excel would work on wine. It's the only reason I do occasionally fire up windows on my duel boot. (And no the open source / browser based spreadsheet options don't always suffice, brilliant as they are).

My main issue is I'm not shutting down my Pi-Hole, home assistant, NAS etc etc just to plug in something like this in, and then 24h or so later shut them all down again to retrieve it again. That said I basically have a collection of Pis (passively cooled and this silent) and a Synology disk station so the power use is pretty low.

You've got me there, but by logical extension you are now saying the celestial body the ISS orbits is ...the moon?

You seem to be saying that the earth-moon barycente can be logically referred to as just 'the moon' ?

Some people use apps which hide posts they have interacted with. A downvote counts as interaction so people in turn then liberally downvote nearly everything. Yes it's unhelpful and dumb. Solution, use kbin and at least you can see who downvoted you! (Except I don't think downvotes are federated).

Mobile friendly version: https://m.xkcd.com/2898/