On: SHA1 collisions make Git vulnerable to attacks

[Pharylon]

Linus in 2005:

"But the _real_ security comes from the fact that git is distributed, which means that a developer should never actually use a public tree for his development."

And then GitHub happened.