one reason to keep it is to restart just a single job in the matrix and mark it as `force_secure_env`, so I would favour keeping it but rejigging the logic