I don't expect Github to go away anytime soon (though if it did---yes, it would be very disruptive; your paranoia is not unjustified). I'm more concerned about compromise of a single high-value target; anyone remember when rubygems.org was compromised in 2013?