You will never eliminate the threat entirely, pinning and not using obscure projects does however cut down on the probability and you can't deny that.