That was not an attack on Github itself. GH made enormous impact in the open source movement and is still beneficial for every software engineer by providing a free and very useful service.

Meanwhile, for a software business, Github is a wide and deep attack vector and nobody seems to be concerned about it.

Of course the same can be said about any other public git hosting, especially if it combines CI/CD, artifact distribution, identity and trust management.

So many security breaches involve the internet in some way. Maybe we should just turn it off.