I feel I should clarify that I only mentioned this in the general Matrix room because I saw it being discussed in the NixOS Security Discussions room, and thought some of the points raised over there may be of interest to the Aux Security team just for future reference, not to raise it as something that needs action at this early stage.
No worries. I was grateful for you pointing at the discussion. When thinking about it a bit more I realized my original statement sounded like we already made up our mind, while in reality we touched upon the idea but I don’t remember us deciding and documenting the reason.