Ah, I didn't catch that, and that's a plausible read. Because any contributor making an edit has push access to the source branch.

I think that's what they meant. Anything else wouldn't make much sense anyway.

Seems like making a PR out of someone else's "private" changes now requires two PRs: first into my fork, then to upstream.

Not that this is a common use case, but I did consider this two or three times the last five years...

That makes much more sense, I was a bit confused by that section.