I think they did say that in the older thread. But for proper security, you shouldn’t have to trust them. You should have build tools that will re-fetch everything to create an identical build. That gives a clear chain of custody, which proves that morning has been tampered with.
It sounds like most, if not all, come from upstream projects.
I love the idea, but I don’t believe the timeline.
It’s hard to prove the blanket statement, “there are no good reasons to have a private jet.” But it’s easy to prove, “one overpaid person taking a private jet to commute 1000 miles is frivolous.”
No. As a general rule with all software, you purchase a license to use the software, not the actual software itself. That being said, GOG and Itch.io can’t yank games that you’ve already downloaded. I don’t know if Steam does or not, but it probably can.
Two different concepts.
You’re talking about work slowing because of increased overhead from more people needing to communicate and make decisions.
The OP is talking about the"bus factor". How many people can leave the project unexpectedly and still have the project survive. E.g. if only one person has access to merge changes, the bus factor is 1 regardless of how many people actively contribute.