[opensource-wg] On the xz/liblzma breach and open source maintainer burnout