TeamPCP breached GitHub via a poisoned VS Code extension, exfiltrating 3,800 internal repositories. Microsoft's zero-trust evangelism meets its own governance failure — and the developers who abandoned GitHub years ago are feeling vindicated.