So the scary part with these is that a workflow file committed to a branch can run before anyone reviews the PR, depending on how your triggers are set up. Pull_request_target is still the one that gets people.