This is fine for our use case, because the GitLab instance is not exposed to the internet.