No-- I'll fetch branches from other devs, inspect them, merge them locally, then push to remote. But that all happens on my local machine. I use the Gitlab UI

No-- I'll fetch branches from other devs, inspect them, merge them locally, then push to remote. But that all happens on my local machine. I use the Gitlab UI for issues, creating merge requests and discussing them with other devs, etc. That centralized Gitlab instance provides a lot of value for me. If there were a method of leveraging something close to the Gitlab UX with a decentralized or even federated design underneath, I'd use that. But this article reads like it's saying, "Give up that value and use this less convenient flow in order to protect against an unlikely class of attack."