PaaS platforms need to access code repositories, manage build artifacts, inject environment variables, and maintain database connections, which means that once the platform side is compromised, an attacker may simultaneously reach the assets of multiple tenants.