I spent about a decade working on #jenkinsci and let me tell you: it is wild that the CI service from a literal trillion dollar company has shittier security in 2026 than Jenkins.