I generally feel how you do, but looking at commit histories for large projects on Github, this appears to not be the case (Rust, Facebook's Flow, a few Adobe r

I generally feel how you do, but looking at commit histories for large projects on Github, this appears to not be the case (Rust, Facebook's Flow, a few Adobe repos, etc.). I can see the appeal, especially for open-source projects, as future employers can see your work there, but I agree with you about the risk and IP concerns.