if this is a widespread issue (and I don't know if it is) I would consider flipping the default so that shallow clones become opt-in