GitHub's pull_request_target in ADO ?

Hi   When some user open a PR from a branch/fork including some modification on the pipeline, ADO executes the "modified" pipeline instead of the original one. This is an open door to PPE (Poisoned...