So if you want privacy, you have to accept poor and sometimes insecure services.

"Vulnerabilities in the software that makes the internet" is honestly lower priority than "The platform that the software that makes the internet uses to make releases" If buyers of those internal repos find ways to break into GitHub such that they can cut software releases, or poison github actions from a distance, then we're all in a very ugly mess.

Don't forget that in those 3800 repos is likely also npmjs.org itself.

That company sounds a lot like one that doesn't focus on the right things.

How does Root/Ventures, V1.VC, Matchstick, Redpoint, and Sequoia get paid and what does that eventually look like for the people who have adopted Zed?

Does it enshittify? Does it just get bought by somebody else and languish?

finally you then take their response and staple it to your binary. Its a lot of steps.

The sad part is that gamestop is offering 55 billion, yet only has 9 billion in cash. The only way they come up with that much capital to buy ebay is to dilute the existing shareholders to a point that "to the moon" will just be moondust.