Hot take: Let the press document things, and leave the burner-phone stuff to security professionals. The press more or less requires attribution, so let them front that risk. Meanwhile digital anonymity starts at point-of-sale and is not easy for just anyone to pull off. The overwhelming majority of people are just better off just showing up "naked".

Even better: use pre-commit. It supports all kinds of stuff without a lot of config. This gets you (and GP) a lot of the features of a full-blown CI pipeline, but it all runs locally before anyone breaks anything.

Speaking of coding out of spite, is nobody going to mention that his C code features a struct with over 20 fields in it?