Pull requests that kick off arbitrary Github Actions code is crazy unsafe. By default they need a human in the loop to approve CI jobs for public repos.