People will not adopt a safer version if it broke their workflows. Adoption is part of preventing supply chain attacks.