I suspect TC may have been leveraged but it doesn’t mean it’s responsible for every horrible misconfiguration that can occur. Case in point, I have used TC to

I suspect TC may have been leveraged but it doesn’t mean it’s responsible for every horrible misconfiguration that can occur. Case in point, I have used TC to gain AD administrative privileges before because the idiot who set it up ran a build agent as a domain admin so it could get access to a locked down signing cert. I just created a new build to add me to the right group and ran it on that agent. These things are really trivial to find and exploit. Also the build agents will obtain and run almost any untrusted software and leave it on disk quite happily for when a later build comes along.