Most large companies have their CI/CD behind a proxy with an allow list and require internal approval for tools and extensions. So there is that.