New Atlantic Council report takes a look at over a hundred software supply chain attacks and vulnerability disclosures from the past decade. Blind faith is no longer an option ? ?