I agree that sponsoring DHH was a mistake. But I don't see how Framework could have used more money on security to prevent a zeroday in a third party product.

They could have sponsored the political activists driving NixOS instead.