Supply Chain Attacks

[huaopeng]

What types of mitigations are there for mitigating QubesOS supply chain attacks?