It's a nice way to alleviate the barrier to monetization that open-source-as-security poses. In short, instead of having lamdba user trusting 'the community' for security audits, now each user has to implement security measures.

This leaves users holding the bag. Well, it should work for you but remains subpar.

Congrats nonetheless.