This is essentially a revert of 91fdb209. It is safe to use the pull_request_target event for new-prs, because it does not checkout any code from the pull request branch.
