> This is a blog post by GitHub. what are you suggesting that these employees do? Simply ignore that they exist?

The buggy, insecure feature that is GitHub actions? Yes, preferably so.