New changes can always sneak into master between running CI and merging, so all this does is introduce uncertainty over what was tested, it in no way guarantees anything about the safety of merging to master.