@alanz I wonder if an evil actor could publish a poisoned blob though.

Since blobs are addressed by the hash of their content, this should also be pretty hard to pull off (for the foreseeable future)