Air gapped open source and the secure but stale paradox — Blankdot