For the integrity of the engineering profession and the security of digital infrastructure, reliance on legitimate software acquisition is the only viable path forward.