> Ubiquiti kept all the hardware signing keys in a private GitHub repo that every employee had read access to

This right here is why I'll never use Ubiquiti gear. These devices are so obviously backdoored and like swiss cheese, they offer the complete opposite of security. Thanks for sharing the true facts.