The parent was assuming full compromise. The risk of disclosure is pretty obvious with GitHub, and I’d assume anyone with low risk tolerance here is using some

The parent was assuming full compromise. The risk of disclosure is pretty obvious with GitHub, and I’d assume anyone with low risk tolerance here is using something else, including the on-prem GitHub. I can think of a dozen higher risks.