All of the flaws that come with supply chain attacks on repos also apply to random websites, plus even more flaws that repositories are not as susceptible to or do not apply to repos at all.

Doesn't change that this ^ is a fact you can't refute, so I'm correct. Your entire argument is strawman arguing against claims that I've never made and name calling. You're basically just arguing with yourself. 🤷