Yes, a very reasonable concern, we haven't yet implemented any measures against this. However, deployment is done via Terraform centrally in the CreditHero backend, so we can put measures in place.