I wonder how that code managed to stay secret so many years. How did they keep all the mass of data, the tickets, the user stories and pitch decks from being spilled online and get publicly dressed down? I guess that’s the one single major threat to effectively WHF: the need for maximum security secrecy and infrastructure control.
I’m referring to the technological aspect. The amount of air-gapping, leak prevention, no-more-than-need-to-know protocol, opsec is impressive if they managed so far so long.