There are a minority of very capable people whom need to be able to report security issues and want to contribute valuable additions easily.

I for one just found a CVE-worthy DoS in a popular YAML library, and an working to resolve it and improve testing.

Shutting off the phone and answering machine because of telemarketers isn't "the" solution, because then no one can get ahold of you.

Instead, deal with the shit to get the sugar too. Otherwise, why use GitHub or why have a phone?