The only sane thing to do
... "only merge things after verifying they are valid" should maybe be the default policy of the most used piece of software in the world.
Indeed ...
It is the only sane thing to do.
I was unpleasantly surprised (very) to learn that pull requests to the Linux kernel code were accepted solely on the basis of its provenance.
And I have an odd feeling that this was just an exercise to test the waters, so to speak.
The next time (if it has not happened already) it may well go unnoticed.
Like Doctor Syntax said when this was news here at ElReg:
"... remember that Linux gets used in a lot of places these days. It's critical infrastructure."
You. Do. Not. Fuck. Around. With. Critical. Infrastructure.
O.