... and after the latest openai episode, we now know that msft was pulling the strings in the "shadows" (the "nah! I am just supporting without doing anything...").
It is not conspiracy anything to think it is certainly happening elsewhere.
And there is so much critical open source stuff on github... that said, github is at least noscript/basic (x)html friendly for its core functions.