What certainly comes to mind is the recent leak of the Github SSH Host key where such a mishap opens the possibility of MITM attacks if no appropriate actions are taken.

Practical examples of common sense could be pipelines in gitlab where a ssh connection is started. In such situations, the easiest solution is to just ignore the fingerprint but of course if the gitlab server network environment is compromised, a MITM attack is very possible.