Agreed that the surface area around the out-of-band changes is a concern. We find that educating our users around getting the extension installed team wide is the primary approach by way of policy (in GSuite orgs, you can install extensions team wide) or training (on-boarding docs/new hire orientation). Just as with source control we can commit straight to the main branch, it's through policy/training that we do things like mandatory pull-requests/reviews to not "allow" that. Long term we envision Gold Fig plugging in to your projects as a read-only member to pick up any other out-of-band changes.