Breaking up is hard to do when it comes to large pull requests, so GitHub is stacking things in favor of development teams ...
A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.