Comment by TingPing

Depends on how much they care. They can take down repos containing any keys, or use heuristics to block clients.