This isn't a mom and pop shop. They have locations all over the world: https://datacenters.microsoft.com/
There's no intrinsic reason they should be vulnerable to themselves.
There's no intrinsic reason they should be vulnerable to themselves.
But Github don't have that rationale.