So in summary:

- a writable shared global cache is made available to PRs opened from forks by randomers.

- that cache is reused in the deploy pipeline

- deploys can be made with a single authentication factor, stored on the CI server

- the repository apparently does nothing to check for malicious deploys, delegating that to 3rd parties to do after the code is in the wild.

- by default the package manager runs random code when a package is updated

What a world we live in.