There's nothing in the law that says that Github must block an entire company from accessing their company org because one member of that company logged into a

There's nothing in the law that says that Github must block an entire company from accessing their company org because one member of that company logged into a separate account that happened to be a member of the company org. At most, the account that was accessed should be suspended.