[angus-g]

What about if somebody clones a repo, then adds a .mailmap pointing all the addresses in the history to their own?

[trulyme]

If somebody clones the repo they can even rewrite history. But that is not the same as them being able to claim the ownership of a commit in the original repo.

[teawrecks]

Then in their clone, they made all the commits. But who cares about their clone?