I think you would be surprised by the level of auditing/tracking that can go on employee laptops at some of these big companies. Every network connection, every

I think you would be surprised by the level of auditing/tracking that can go on employee laptops at some of these big companies. Every network connection, every peripheral connected, every file read, every program executed. If you wanted to exfiltrate code without the consequences, I think that would be challenging. There are only a number of ways I could think of doing that without leaving some obvious artifacts and that skill set is probably 1 in 100 to think about doing it and 1 in 10000 to actually do it. Googling "how to exfiltrate data from a corporate network" leaves artifacts too. Competent security teams assume that their code repos are compromised as well since it would likely be the first thing to be exfiltrated. Furthermore, there are probably only 3 categories of people who would be interested. (1) nation states (2) criminal organizations (3) disgruntled employees. Criminal organizations might be interested in blackmail. Disgruntled employees are most likely to be motivated by political reasons (think snowden).