This is a shocking disclosure from #Radicle

> Network traffic between nodes is not encrypted and not authenticated.
>
> We recommend to stop using private repositories until a fix is released.
>
> Due to a lack of version negotiation features, combined with the fix being incompatible on the wire, a backward compatible mitigation is not feasible

https://radicle.dev/2026/09/23/disclosure-of-vulnerability-in-network-protocol

And no promotion of the problem from @nprofile1q...