Yeah, but you do need to know how to set it up securely - this isn’t any better than the CircleCI incident: https://news.ycombinator.com/item?id=34446673