douglascamata

Pretty much the most sound comment in this section. It's like some organization "stole" the meaning of the words "open source" and called it "Open Source" (with the capitalization). Now you can't say your source is open for anyone to read anymore because it's not "Open Source"™ as "That Entity"™ defines it.

Apparently, The Github CLI only stores its oauth token in the HOME directory if you don't have a keyring. They also say it may not work on headless systems. See https://github.com/cli/cli/discussions/7109.

For example, in my macOS machines the token is safely stored in the OS keyring (yes, I double checked the file where otherwise it would've been stored as plain text).