As well as FoSS projects.

Absolute opposite. The majority of successful attacks you see today are identity management and supply chain attacks. If you walk into any OCIO office supply chain will be a top 3 concern.

Oh no! Anyways,

🤣 should we get a list of foss projects that have had security issues? Or how about how someone slips some shit in upstream every few weeks it seems?

Stop this nonsense. You can hate Microsoft for legitimate reasons.

Best option for non techies at home.