That's useful that ngrok has centralized webhook verification! It's meaningful security for the first hop from GitHub to ngrok.