the third point is applicable to a number of tools and systems, but who would claim that using git doubles your security surface?