There is state-sanctioned industrial espionage happening to a number of Western companies manufacturing critical software. Some countries influence emigrants to

There is state-sanctioned industrial espionage happening to a number of Western companies manufacturing critical software. Some countries influence emigrants to steal corporate secrets (including code). They are instructed to download company data using whatever means possible. I know of a company that began isolating parts of the business located in those countries to minimize the risk of data exfiltration. One theory I've hard as to why cloud development environments are becoming more popular is that it's easier to monitor nefarious activity in a cloud environment versus a work-issued computer. For example, flagging large downloads of entire repos to one's local network. These environments reduce the attack surface vector and make it easier to set up monitoring for the remaining surface.