Can you state with absolute сertainity that no entity outside your github unit can exfiltrate data at will?
This is not spicy, this is basic infosec.
Nobody can say that with absolute certainty, so obviously not.
And since you presumably knew that already (as it is basic infosec) then yes it is spicy, or simply antagonistic.
It's a pretty antagonistic way of asking a question man. Don't do that