Github had enough mindshare that for a small dev operation it was a form of social networking on top of actual code revision control, and one could get the occasional PR worth looking at; this consideration has essentially gone away as the amount of unreviewed vibecoded slop has skyrocketed
I know I'm biased but I'd run my own git server
but you're right that security is of no object here if you're code is OSS in the first place
For any code you are sharing, I think you are underselling the hosting + sharing convenience. Everyone looks for projects on github, it is what people expect. Hosting it yourself requires managing user signups/accounts/permissions/etc.