I'm kind of shocked all y'all commentators have such well secured CI systems. ;) I've been developing software for 17 years, and at every employer, from 2 to 20,000 employees, CI systems were treated as an afterthought in terms of infrastructure and security resources.

It was dramatically obvious how bad this was from a security perspective, so perhaps this article isn't necessary, but certainly it's right on the money.