think today’s php disclosure is a harbinger of things to come. these models will make us all safer by finding long lurking issues. however the entire software supply chain will need the muscles to rapidly build and deploy fixes. we might need a lot more public + private partnerships to secure infrastructure across the country.