And how to prevent that? Does a account need a history of accepted pull-request? Do you declare Security Sensitive Project Codezones, where only established m

And how to prevent that? Does a account need a history of accepted pull-request? Do you declare Security Sensitive Project Codezones, where only established maintainers can commit? Do you auto-watch the authors of your code, for false profiles? Meaning if they are obviously abandoned, you revert there commit?