Publishing source as client-side JS when millions are out there looking to rip you off at every turn is a losing proposition. And I think you know it.
Shifting blame to GitHub is absolutely idiotic.
Try removing locks from your doors in a high crime area (which is what the Internet is) then being indignant when the police can't stop all the criminals stealing your property.
'losing proposition' is irrelevant. The law is clear in this case, and the law makes Github's obligations exceptionally clear. By refusing to act, if the DMCA notice was valid, Github is breaking the law and forfeiting their safe harbor status.