Is the xz backdoor possible with #bitcoin core? or are there too many eyes on a single project?