Not really? Every single maintainer / owner of a repository can do that. The only thing stopping them is protecting a branch. And even that isn’t a thing in git, it’s just something that providers like github or gitlab did to prevent people accidentally pushing to main like that. So they got maintainer access and that’s the entire story?