I’m not sure I would hire anyone pseudonymously except for work that could be done on, say, Upwork or MechTurk (small assignments that don’t require sensitive a

I’m not sure I would hire anyone pseudonymously except for work that could be done on, say, Upwork or MechTurk (small assignments that don’t require sensitive access). I would look at the US CISA guidance[1] on North Korean hacker MOs and consider the possibility that the person you hire might be using the opportunity to drain your company of finances, IP, or to sabotage your infrastructure. They may not work for North Korea, but consider the possibility they might abuse your trust in a similar way. [1] https://cisa.gov/uscert/ncas/alerts/aa20-106a https://cisa.gov/uscert/ncas/alerts/aa20-106a