We are sitting ducks if you think about it. If a couple university researchers can get malicious code into the Linux kernel, just imagine what well funded state actors are doing?

https://www.theverge.com/2021/4/22/22398156/university-minne...