> “hey, do you REALLY want me to use this local privilege escalation bug so I can download your Google Drive file?”

yes, this exactly

but, there is a fatigue that sets in and i've experienced it myself.

- is it ok to run script xyz?

- allow permission to edit abc?

- allow to request blablabla?

over and over.... click click click

something will get in there that is dangerious and then its whopsie our keys are now on github