I think you may be missing my point. How does one user serving malicious content from githubusercontent.com not result in the takedown/blacklisting of all users

I think you may be missing my point. How does one user serving malicious content from githubusercontent.com not result in the takedown/blacklisting of all users' content on githubusercontent.com? Sure, I understand how github.com is protected here, but I'm also unaware of github pages being totally blacklisted by Google even though I'm certain there have been malicious pages hosted there. You can only limit the blast radius so much if the product itself is "hosting user content."