If the CVEs are in something like the Go standard library or compiler, it's ok to build the apps yourself. At least in open source.

I disagree. I would make it portable. Don't tightly couple to anyone. They I could operate it where ever works best for my needs.

I would have guessed they are an artifact of the test. There is a mild difference outside of the exact expression.

As a long time Internet professional (and former web dev), I find this to be both hilarious and sad. FWIW, this one is on Congress.

You can e2e encrypt iCloud in the US. It's not on by default but it's available.

Doh. Bitten by signing. That is no fun at all.