I can only guess that "obscurity" is an excuse for the defects of GitHub's machine learning of spammer detection. The spammers can always check if their accounts have profiles even if there is no notification.

(Don't know why you and all my neutral comments are downvoted. Angry GitHub employees here?)