Frankly, I disagree. Stealing source code is a valuable enough goal, and doable cross platform with the file system APIs. If exfiltrating source code was easy

Frankly, I disagree. Stealing source code is a valuable enough goal, and doable cross platform with the file system APIs. If exfiltrating source code was easy to detect, ssh secret keys are stored in consistent locations across machines and are comparatively small. Stealing these would be quite lucrative.