"Just gimme thething, I don't care where from" is a great way to get supply chain vulns