Yes they are. But only after they get dropped from the reflog, after 30 days by default.

That is true, but only when they're older than 2 weeks (or whatever you define with --prune). I don't know what GitHub's configuration is here.