At its core, this incident stems from supply chain risks caused by “ecosystem entry points combined with executable text instructions.”