You have to think about the security implications of this.

How many people had any idea this was happening? Very few, I suspect.

A malicious actor could take control of a model provider, and then use it to inject code into many, many different repos. This could lead to very bad things.

One more reason that consolidated control of AI technology is not good.