PGP is modeled on physical mail: content is private, but identity is very public. (I mean, the very idea of signing something is inextricably linked to having a public identity - if you're signing commits on github then you're creating an identity that stands by those commits).