That's a fee for not running a local git proxy with permissions enforcement that holds onto the GitHub credentials in place of Claude.
GitHub is also a worry in terms of exfiltration. You can’t block pushes to public repos unless you are using GitHub Enterprise Managed Users afaict.