But even worse for private stuff than using cloud inference to begin with, since it presumably has to clone the repo, have write & Actions access back, etc.
I think the only solution there is self-hosted inference (either local, or on your own cloud servers with open weights).