if they can't guarantee this then every single repo that had coderabbit is potentially compromised