For one, because if someone does find a hole that gives them access to Github data, they'll have all password attempts, which would include typos of the real pa

For one, because if someone does find a hole that gives them access to Github data, they'll have all password attempts, which would include typos of the real password. Which is a terrible, terrible thing to store in a hard drive (see Adobe)