Git hooks have always been sketchy as hell.
Can't stand the Mac specific shit my co-workers keep dumping in there.
Wouldn't untrusted git hooks mean that git verify-* are useless since you're already running untrusted code?