The backlash was fast and predictable — the PR review workflow is one of the last places developers have uninterrupted focus, and inserting suggestions there (especially AI-generated ones that look like actual review comments) erodes trust in the tool itself.

The more interesting tension is that Copilot is increasingly a product that needs to monetise beyond the subscription, but the developer audience is uniquely hostile to patterns they recognise as dark. The NPM compromise story a few slots up today is a good reminder that trust is the actual product being sold when you put AI tooling in a developer's workflow. Breaking that trust even slightly tends to have disproportionate consequences.