Comment by yellow_lead

Given that PRs run actions in a more trusted context for private repos, this is a bit concerning.