Knowing many sortware developers, a suprisingly large percentage of them still think about security as annoyance. This is especially problematic, as they tend to have a larger attack surface.
Having access to critical resources and also executing a wide range of semi-random tools and code on your machine is ... less then optimal.
With the rise or supply chain attacks, I believe this is a critical and required change.
You could argue that GitHub should not be forcing that decision on users, but if they want to protect their brand, they kind of have to.