Should've sent them to Fedora and specified, categorically, only certain packages, and not allowed them to install any dependencies.