💯 💯 💯 - massive attack surface for malicious actors which leads to two options:
a) turn routing into an insane cat and mouse game
b) adopt an allowlist model, which hurts the few developers actually building something novel
A malicious hook doesn't need a UI to scam you.
👉 It just needs to look like the best quote.
After analyzing over 84,000 v4 hooks, we determined only 19% of hooks to be safe.
It's time to get real about hooks.