I wish Gitlab would just fix up their existing product instead of increasing the surface area. Every month they put out a security release that often contains a couple of "high severity" bugs and every couple of months there's a "critical" one. And they're not rocket science either, simple auth check bypasses and so on. Clearly something's not going right in the culture if you have multiple critical security bugs every year.

I am increasingly antsy about hosting my private Gitlab instance on the web, and this does not reduce that.