"non-technical example of people using signals when players leave the board (in the bathroom, over a balcony etc) and in technical ways suggests that certain earpieces could pass checks or potentially other small devices"
A lot of projects publish to Central from cloud CIs. That means that private keys are stored in config/secrets. It is debatable whether that makes the artifacts more reliable since you have to trust the CI.