Looks like the sede situation is being worked on
Closes #2538 Supercedes #2579 Follows my recommendation: #2579 (comment) Current choice: Opt-Out (current commit) Override via cfg(serde_derive_build = "source") to build from source Alterative: Op...
So, the general unsuspecting public will still be executing this potentially-malicious binary, and only those in the know will be able to avoid it?
Only if that PR gets accepted, which is unlikely.
A similar PR was accepted.