Plus, I greatly appreciate the transparency of many of the features that Gitlab sells around security outlining exactly which open source tools they use so that you can just go do it yourself on the CI pipeline. The real value for the premium security tier is when you have a team coordinating multiple projects.
I've seen Github try to upsell to enterprise with features that I can just install in a few minutes using the tools that Gitlab tells me about.