I know this is not directly related to the recent Chinese (?) backdoor, but the XZ format has all kind of problems and I personally avoid using it. Having a better compression ratio is not a reason to prefer XZ, IMHO. See https://www.nongnu.org/lzip/xz_inadequate.html
#gnulinux #opensource #Debian