> an indiscriminate digital attack

I disagree. Users are responsible for the open source software they use. If they want to blindly execute software from the internet without auditing it first, that's their problem.