So the scary part with these is that a workflow file committed to a branch can run before anyone reviews the PR, depending on how your triggers are set up. Pull_request_target is still the one that gets people.
That pre-determined value idea is exactly local hidden variables, and Bell's inequality rules it out, Aspect's 1982 CHSH experiment measured the violation.