On: There is no “software supply chain”

[concordDance]

> And in all my years of experience, I still am no closer to understanding how to fix that.

Does it need fixing? This may be a case of the cure being worse than the disease (the velocity loss outweighing the security risk).