Learn extra at:
We see this most clearly within the friction round opting out. In 2025, Microsoft and GitHub challenged developer belief by pushing Copilot deeper into core workflows with out giving maintainers clear, dependable management over it. For instance, two of probably the most upvoted GitHub Group threads within the prior 12 months were requests to block Copilot-generated issues and pull requests, and to repair the shortcoming to disable automated Copilot code opinions.
Past this friction, GitHub has made ecosystem-level shifts that really feel like rug pulls to integrators. In a transfer that shocked many, they introduced a tough sunset for Copilot Extensions constructed as GitHub Apps, blocking new creation after September 24, 2025, and imposing full disablement by November 10, 2025. By explicitly telling builders this was a substitute fairly than a migration as they pivoted to Model Context Protocol servers, GitHub violated the cardinal rule of “boring” infrastructure. Stability is meant to be the function, not API churn.
And simply to spherical it out, Copilot’s safety posture took a really public hit when researchers disclosed “CamoLeak,” a important Copilot Chat vulnerability that would exfiltrate secrets and techniques and personal code from personal repos through immediate injection and a CSP bypass, which GitHub mitigated partly by disabling picture rendering in Copilot Chat. Put these collectively and the belief downside will not be that AI exists, it’s the notion that Copilot is changing into unavoidable infrastructure, whereas concurrently being topic to churn and occasional sharp edges which might be laborious to justify when the product is meant to be the boring, reliable layer.
