And more, it’s known that av can increase sloppy behavior regarding security in people that does not know about security, making them feel safe and, therefore, clicking anywhere and installing anything
Av does increase the risk of being infected for most people
The way this xz backdoor was treated is good enough!
Identify
Announce
Evaluate
Rollback
Always with good version control and cryptographic keys to sign the packages