@glyph @whitequark @emma @mcc The problem with (4) is that the parties imposing these requirements don't actually know the scenarios, and can't.
GitHub isn't distinguishing "my personal hobby game" from "critical component everyone is curlbashing".
So they end up imposing the discriminatory requirements on everyone.