Probably true. I work in a regulated space and I have done this to get my zsh config to a secure laptop, but I have always had the common sense to mark the gist as hidden (can still be accessed if you know the hash, obvs).