I think it's a combination of money laundering and phone scams where people are told they owe money to the IRS or something and are tricked into buying a bunch of gift cards.
That said, if buying and redeeming gift cards are such an indicator of fraud that people are legitimately afraid of getting their accounts permanently locked, why doesn't Apple just stop selling them?
All these platforms are kind of a non-starter at scale. The thing that would really stand out is something that has the user friendly workflow definition but then for production running, bakes it into a container that's orchestrated on k8s natively.
We figured out a decade ago or so that Slack was entirely unsustainable for any kind of community type usage. Glad to see that more people are coming to that realization.
NPM is a Github company and when there was a relatively serious attack in Github Actions a while back there was also pretty much zero response from them.
Github is SOC2 compliant, but that of course means nothing really.