That's like saying Kwikset (or any lock manufacturer) should be responsible because I left the key in my deadbolt and someone used it to break into my house.

That's like saying Kwikset (or any lock manufacturer) should be responsible because I left the key in my deadbolt and someone used it to break into my house. I do agree though that a pre commit check would be nice but it isn't GitHub's responsibility.