

I was more thinking along the lines of having FOSS repos that are primarily used by me but which can accept external pull requests by anybody with a Github account.
I like the idea of running my own machine for CI but I don’t like the idea of having to become knowledgeable about avoiding exploits.
This statement is so categorically ridiculous that I have no choice but to assume that Herb Sutter is deliberately trying to mislead people. I would be very surprised if even 5% of “real-world C++” occurred at compile time. In fact, I would be very surprised if even 5% of “real-world C++” was valid
constexpr
that just ran at runtime.