Commits are no longer available through the "standard" GitHub UI and normal git operations, but a previously known commit hash can still be used to access them directly. How can this be a security ...