Your points are good ones for something like GMail (where a single account allows access to many Google services and includes a potentially huge trove of other

Your points are good ones for something like GMail (where a single account allows access to many Google services and includes a potentially huge trove of other private data). For github though, the the repos you have read (or commit if vandalism is the risk) access to are the data in question, so unless you use your github account for other things, I'm still not really seeing the benefit to the end user if you still have to store OAuth tokens everywhere you actually use git. Can github issue OAuth tokens that are restricted to a specific repo? At least that would prevent a token leak exposing other repos that you had access to.