Oh dear. Another allegedly censorship resistant platform, and where do they put their code? On the most censored and censorable place possible, github. It's just one DMCA complaint away from being taken down, or Microsoft may decide to just lock out some or all of the developers.
It is no wonder that these projects that claim to be 'decentralised' still relying on using centralised services like Discord, GitHub, Etherscan, Coinmarketcap, Coinbase, Binance and Twitter, and they scream about 'web3'. Whatever that means.
On your point towards Github there is a solution and that is to self-host the source code via using something like GitLab, cgit, gerrit, etc in which many free and open source projects already do this.
Exactly. The platform is only as decentralized as the codebase. Most people are going to blindly download and run whatever the developers put out. Decentralization and immutability are illusions. See: Ethereum DAO fork.