But we can already mirror a git repository, and you can already sign your commits. The weak point here was the developers' identities, not the platform on which the data was hosted.