It's a huge security risk, often administered by a non technical acct owner who doesn't understand implications. A time sink to verify that I'm opening a repo up to the proper identity. One that I'll willingly do but I wish it was easier / had more checks & reversible steps.