a single contributor with no stated organizational backing could submit compliance infrastructure for surveillance law directly into the software that boots your computer, get it merged by two Microsoft employees, and have the creator of systemd personally block the removal.
https://www.sambent.com/the-engineer-who-tried-to-put-age-verification-into-linux-5/
The Engineer Who Tried to Put Age Verification Into Linux

Dylan, useful idiot with commit access, pushed age verification PRs to systemd, Ubuntu & Arch, got 2 Microslop employees to merge it, called it 'hilariously pointless' in the PR itself, then watched Lennart personally block the revert. Unpaid compliance simp.

Sam Bent
@leyrer Poettering, the Thomas Midgley of computer software, strikes again. Not as the primary offender this time, but still as a tool in various meanings of the word.