The vast majority of attacks these days are not via compromised desktop environments. They are from phishing, password reuse + third party password compromises,

The vast majority of attacks these days are not via compromised desktop environments. They are from phishing, password reuse + third party password compromises, and weak passwords. Its these most common attacks that Github is addressing with this change.