I would assume they are spying on you and using your data no matter what they claim.

The bright side that we can poison their model with malicious data.

Who owns Github?

Wait! It's Microsoft.