The rules of cybersecurity:

1. Under no circumstances should you own a computer.

2. If you absolutely must own a computer, under no circumstances should you connect it to the internet.

3. If you absolutely must connect it to the internet, it’s too late and they already have you

Like most supply chain attacks, it’s targeting developers and other people who use tooling like this rather than Bob and Alice on the street.

That doesn’t make you safe from supply chain attacks generally. There’s no reason a supply chain attack couldn’t be applied to software repos you do use if a vulnerability exists within them and a bad actor is sufficiently motivated to exploit it.

People hate inconvenience more than they hate their data being mined.

If we’re being real I don’t really trust anyone with my data.

Yet you participate in society. Curious.

Depends on where you’re watching YouTube, but there’s options for most devices. On PC you can use an ad blocker such as uBlock Origin, or a browser with a built in ad blocker like Brave. If you use a phone you can use the mobile browser version (not perfect but pretty serviceable) with a browser that blocks ads. There’s app options for Android such as Greyjay, and modded YouTube apps such as Revanced and Morphe. There’s an app called SmartTube Next that works on most smart TVs. If you have a VPN, setting it to Albania will cause ads to not be displayed on most services even if you’re using the official app and works on every device I’ve tried it on. There’s probably more ways but those are what I’m aware off the top of my head. There is no reason that in 2026 anyone should be seeing ads on YouTube.

This is gonna be an unpopular opinion here but telling people who have used Windows their entire lives to just switch to Linux as if it’s that easy is entirely unhelpful and makes the Linux community look elitist and out of touch.