That is still a somewhat manageable problem, be it with stricter NDAs, or pushing more security restrictions onto company infra.
At least it depends on whether companies are willing to make that change, rather than it being an inevitability
More security restrictions yes, that will work, but unless you actually go airgap all the code, there's an access point somewhere which can be vulnerable, either through the network or through the human init?