> Suspending his account atleast stopped him for 5 minutes while they were working on it and prevented further immediate harm.

But it didn't stop anyone else - and Egor at least very clearly showed that he was not malicious.

To be clear: we all had (past tense, as I'm assuming GitHub effectively fixed it) that "way to cause damage to GH"; it isn't a bug that Egor was hoarding, or that only he was in a position to exploit. You can argue all you want that he deserved to have his account banned (I might even agree with you, although I haven't come to a conclusion on that yet), but to claim that it was some kind of required protection that people would legitimately be able to complain about had they not done it is silly: he can still do the damage from a new account, and someone else can do that damage even if he didn't want to.

> The facts are: Egor has a way to cause damage to GH. I don't think GH would sit there wondering whether he would do the ethical thing.

Uh? It takes about 5mn to create a new GH account and push a new set of keys, it's not like killing his account does anything aside from annoying him.