The next time there’s a zero day in one of their packages you get pwned because their login doesn’t protect their ‘internal’ endpoints.

Keep that thing wrapped up or you will eventually regret it.