Yeah, they’re gonna have to change some policy. The 2-week ownership change for orphaned packages is just an obvious exploit now, but I’m sure more exist.