Yeah, I was shocked to see this buried. If the allegations are verified this could be a huge leak on what a number of people were led to believe is a secure by default platform. It turns out when you can’t trust the CI/CD pipe those guarantees go out the window.