After years of trying to educate developers to use pull_request_target securely, the platform finally implements stronger ...