There's no intrinsic reason they should be vulnerable to themselves.
But Github don't have that rationale.
But Github don't have that rationale.