The most heavily governed system in the organisation, with a dependency path that has no governance attached to it.
“Systemically important” is borrowed from financial regulation, where it triggers obligations. Applied to FFmpeg and the kernel it triggers nothing.
A regulator saying “this is ransomware, we don’t yet know by whom” on day two serves everybody better than a complete account on day thirty.
A voter who wrecks the protocol wrecks their own holding — unless the holding lasts one transaction.