I'm curious why people think this is in the same ballpark as that something like a private investigator can do. This isn't spying at all.

"oh no, they're aware of someone at the computer 19416146-F56B-49E4-BF16-C0D8B337BF7F running `gh api` a lot! that's spying!"