A recent OAuth supply chain compromise at Vercel highlights how trusted third-party applications and platform environment variables can bypass traditional defenses to significantly amplify a breach's impact. This incident underscores the critical need for developers to reassess software supply chain risks and the underlying design tradeoffs of modern PaaS environments.