> But, frankly, if its legal, I am much less comfortable with Github's users subverting the US legal system by backdooring their moral code into products these legal entities rely on
I don't follow this logic. If it's legal, we should not take moral stances in our actions outside of political actions? Doesn't the concept of "voting with your wallet" expressly involve taking moral stances in ALL actions? Sure, the open source projects may not be paying Github directly, but I'm VERY uncomfortable with saying that money is the only way to take a moral stance.
The idea that there's some set of actions that should be categorically immune to moral reactions is...weird at best and feels pretty darn dangerous. Almost no one wants to make every decision an intense moral debate, but the OPTION should exist. Otherwise you just create places to foster corruption.
> It's not that hard, but it is much harder than signing your name on a petition.
This feels like a false choice. Doing one doesn't mean the other is unavailable, and doing one doesn't mean you SHOULDN'T do the other. Indeed, if you think the stakes are high, doing both seems to be the best option.