I'm not familiar with the development process of curl (but I did recently listen to Daniel's interview on the foss pod). But seeing that GitHub is used, would branch protection help?