Ideally, schools should teach people how these access grant dialogs work and that you should be careful who you give access to what social media presence. This

Ideally, schools should teach people how these access grant dialogs work and that you should be careful who you give access to what social media presence. This is no different than somebody "logging in" via facebook and messaging everyone 3 minutes later that they lost their wallet and need $500 urgently. Minus points to GitHub for going after the user and not the malicious app.