I guess the main difference is that it is SF themselves that add some of the crapware in binaries distributed by them. As far as I know, Github have never done

I guess the main difference is that it is SF themselves that add some of the crapware in binaries distributed by them. As far as I know, Github have never done that. That people may upload malware to their github repo is quite different.