Security concerns make it hard to fully trust these tools, but in practice many teams still end up needing to use them.