If implementing utmp/wtmp poses security risk (https://wiki.musl-libc.org/faq), why would BSDs generally include it (and the command `last`)? Could you give some more explanation to a fairly technical user?

I’m not subscribed to this mailing list but I’d like to be cc’ed at every reply to this question.

Thanks in advance,

J