you’d have to be really stupid to give AI such unfettered access to your repository

So 1) we absolutely know people are much stupider than that. and 2) does exactly that has widely been observed.