I accept the debate over whether this was a security risk

My point is that

witnesses can and will change the code and execute it without having a single public conversation

has happened before, will happen again, happens on every blockchain and literally every piece of not-trivial software ever when doing so is considered necessary for security, and is not news.