It is funny that the author mentions the security dilemma. I fall into the category of people who never get anything done because they worry about exploits all

It is funny that the author mentions the security dilemma. I fall into the category of people who never get anything done because they worry about exploits all the time. If you also fall into that category, it is possible to provide read only ("dumb" in the official terminology) git access via http(s). I think that it is important that the primary git repository of projects is not on GitHub, so that may be a first step for projects where the main development happens on mailing lists. For CI, a GitHub mirror could be used that is updated with a cron job.