I have now moved all my public github projects onto sourcehut, and replaced them on github with public notices explaining why (i.e. this whole copilot saga).
Yes I know that presumably that doesn't make them safer from a copilot visibility point of view ... but I had to do something.