They can have weekly outages, and the FOSS products would still be forced to be on GitHub.
Indeed. And I would say it is not just social signals but even non-social authority signals.
E.g. how many other projects depend on this projects and how many downloads happen for its artifacts.
You can see some of these on package registries like npm and pypi where their authority signals help people choose between the right libraries.