It's a question of handing it over and giving them a ToS shield to hide behind, versus making them work for it and risking license violations "in the wild".
Does their ToS give them additional rights to the code uploaded to GitHub? There are several unofficial copies of projects like glibc [1] uploaded by people who definitely do not have the authority to grant any additional rights to the code.