We reflect on recent FOSS security screw ups and ponder a solution powered by community.