Yeah, someone should invent a version control system that does not rely on some central entity but is actually distributed.
[1] https://forgejo.org/ [2] https://codeberg.org/forgejo/forgejo/issues/59
If there is a security issue with some project on GitHub, then you can ask GitHub to look at it and they will take the project down. This cannot be done with projects running on someone's web server.