It is known that environment variables are not safe from exfiltration. If you are using this runner make sure that any workflow changes are gated by a verification process (in the actions settings) so ...

I want it all and I ain't ever gonna settle Even if all of this is just a fantasy 'Cause I been hiding how I feel for you forever Now that it's off my chest, there's room for you and me ...