That's true for local hooks, but neither a dishonest person nor an LLM can bypass a pre-receive hook on the server (as long as they don't have admin access).

Thanks, apparently most people here aren't familiar with server-side hooks.