> If the maintainer has been competent enough to use ...

In security you are considered incompetent until proven otherwise.

And didn't my quote literally say "if the maintainer has been competent enough"?