In response to:

https://gizmodo.com/u-s-federal-investigators-are-reportedly-looking-into-1846707144

Rationale:
* CodeCov didn't detect the breach for two months
* They took a further 2 weeks to alert users after that
* Their efforts to address the issue after that have been painful to watch
  * https://github.com/codecov/codecov-action/issues/281#issuecomment-823407167