Transparency is great, but GitHub isn’t a security certificate.