self-hostable and free doesn't mean they're not proprietary.

and my comment was more about the fact that github is just git (which is completely open) with some extra features. like the other comments have said, it's not really a big risk.