Companies—especially “big tech” companies—have made it pretty difficult to sabotage things without getting caught. They spy on absolutely fucking everything you do, including all of your browser traffic (e.g. ZScaler, which most of these companies now use on corporate-issued machines, inserts a fake root certificate and tells your browser to trust it, so that they can do a man-in-the-middle attack to decrypt literally all of your web traffic). The IT departments often lock things down to the point where you can’t install tools or even run VMs/containers in any context where it would help. You get access to NOTHING without your “single-sign on” account, which tells them exactly who you are when you commit changes to code, write documentation, comment on an issue, submit a design, etc. And physical security is similar (cameras everywhere, RFID badge required to access labs, supplies, etc.)
Capitalists know who their enemies are, and their own (wage) slaves are at or near the top of the list.
Not saying it’s impossible, but DAMN do they make it difficult. Individually you’re probably just fucked. And by the time you have enough co-conspirators to do anything at all effective, you probably have a pretty powerful and effective union anyway (not that it’s happening) and can get away with even more than simple sabotage.
You’re either a social-warrior project or you’re an anti-social-warrior project, Linus. Fuck you. (But what else is GNU.)