Couldn’t this be mitigated against by using something like codeowners and only allowing access to manage versioning files?