Very prudent slides from Blue Hat 2026 a few weeks ago. "A compromised dev workstation is NOT a user endpoint compromise -- it is potentially a compromise of every service the workstations tokens can reach.