The fact that they’d exclude “.git” and other things without being transparent about it is scandalous