the security of their packages should not depend on one laptop being compromised