Granted, but the idea is that they would have to compromise Github, Twitter, a private domain, and more before performing a successful attack. That's considerably more complex than targeting one service.