if an account with the ability to push to the repo was taken over, there wouldn't be any PR review.