so it goes back to who has access to the control repo via Git, and whether the required peer review misses the nefarious actions