Maybe Firefox is prescient, just waiting for someone to create a problematic pull request that does something untoward while simultaneously locking everyone else from submitting pull requests (and get a bunch of bots to upvote it in the last second before the merge window closes).

Merging the security threat is yet to be voted on