The recent backdoor in XZ leading to Secure Shell (SSH) server compromise: 1) reminds us of lessons learned from previous security incidents, and 2) stipulates important community discussions.