I don’t think that github has to know that. You could be using a password manager and choose to make it a minimum character boring password or meet minimum complexity requirements or use the same password on a million sites. You have to secure your credentials; complying with the minimums of a service isn’t security.

Unless your bitwarden has MFA and locks after an amount of time commensurate with your security needs

I just don’t get it. Separating the art from the artist is not a black and white thing…Like a lot of people worked on the harry potter movies and many people fell in love with those before reading the books, and when Rowling went anti-trans, you could reasonably argue that the films were a collaborative work that you can still love. But this? A pre-configured Arch made by one guy who makes his headline presence maligning minorities? I don’t see how giving money to him is anything other than a company saying his views are explicitly endorsed by the donor.