So, to mitigate, avoid changing Github organization names if possible, and if not, preserve / re-register the former organization name to prevent impersonation?
If you don't have a lot of projects, it may be better to transfer them into a newly registered organization because that doesn't require a temporary drop of the namespace. Either way, you'll break the redirect, but that's better than being vulnerable to impersonation IMO.