Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will

...