By default pull requests my new contributors require approval from someone with write-access to the repo before running actions.
These repos have specifically decided to change a setting to make them not require approval for anyone. The UI to change that setting explicitly warns you about exactly this attack, so this “article” feels like a non-item trying to farm engagement.
Eh, not being able to explain it elegantly on the spot in front of people understandable.
But if can’t come up with a simple explanation even when you’re by yourself with all the time in the world, then yeah you probably don’t understand it well enough.
It’s for people that say “it’s a complex topic. You wouldn’t be able to understand it”. Bitch, the human brain is amazing. People can understand anything they want to. You’re just too lazy to help them.