Can't have any vulnerabilities if you don't have a supply chain