You can say the same thing for every "static" hosting. As long as you don't run custom code server-side, every line of code run on the client is readable by any

You can say the same thing for every "static" hosting. As long as you don't run custom code server-side, every line of code run on the client is readable by anyone whichever hosting you use. GitHub Pages offers no more guarantees than "no (custom) code is run on the server". Also I'm pretty confident the 99% of users won't look at the code in advance anyway, even if they can understand what it does.