As long as they retain the option to disable certain features on a repo, I am wholly in favor of consolidating the development stack into GitHub. Easier to mandate 2FA and other security procedures when your team doesn't have to juggle several sites.

Friendly aside: the expression is "err(s) on the side of..."