I maintain a somewhat popular action and advise people to specify a commit if they use my action, but they want to just depend on v1 and trust me to never screw

I maintain a somewhat popular action and advise people to specify a commit if they use my action, but they want to just depend on v1 and trust me to never screw up. They don’t know me. Why do they think I’m not going to sell out to the first person who offers me a six pack to merge their code?