I already require manual intervention via a bot interaction to trigger CI, so this all SGTM.

It seems like kind of a stretch to be outraged by this. I suppose there might be certain styles of collaborative repositories that have a huge volume of one time contributors, but I’m having a hard time imagining this being much of a burden.