A recent security analysis reveals that ZCode silently uploads users' entire workspaces and Git history to cloud storage using server-exclusive decryption keys. Researchers reverse-engineered the upload pipeline to expose the practice and provided a filesystem lock to permanently disable the behavior.