We're not talking expert-level infosec here. They should have firewalled their CI systems. That's pretty basic stuff.