Clearly someone is paying for additional investments into security. GitHub, that is.