One starts to wonder, at what point might it be actually feasible to do it the other way around, by whitelisting IP ranges. I could see this happening as a community effort, similar to adblocker list curation etc.
Sometimes I wonder how many lifetimes have been wasted by people all around the world fixing CI because a script expected a branch called master. All for absolutely pointless political correctness theatre.