This is really terrible, and GitHub is such a tremendous platform. I think it's time they improve their cybersecurity to the maximum level possible like https://demyo.com/ and be more strict. It's even irresponsible if they don't do it.

Good to know the State is finally trying to do something, pushing developers (although not that much) to improve the security of this technology. It was about time!