if a supply chain attack is susceptible to that, its purely the fault of the crowd the relies on those metrics