Concerning

“Kaspersky traced the malware back to Alldocube, a tablet maker that publicly shares its firmware archives for security vetting.”

Ask me why I run GrapheneOS on mine.

I read this as android toilets at first. I had questions.

My biggest concern, well, pretty much my only concern, with open-source software is that it's entirely too plausible that even with the evidence publicly submitted that the manufacturer of the open source software has inserted malware, it still requires somebody else to come behind them and read what they have submitted and review it and sound the alarm.

I use quite a bit of open source software, but I have never read the source code for the software that I use.

I am entirely reliant on other people to do that for me. See 7-zip, notepad++.

And the only recourse that I as a user have for being theoretically victimized by a malware distributor like this is to hope that the person faces legal punishment for their crimes.

But I would still rather deal with all of that than ever give Microsoft a penny.

Tell me about your veganism.