oh, yes, that was one of many mistakes we made early on. As we move to a public release, that is on our list to clean up.
Still prone to abuse from transferring repo to credit somebody else, but the original repo owner would have to sign off on the transfer at least.