So GitHub itself is a trustworthy agent and nothing to do with AI?

yeah - from a strict trust point of view, if Github/MSFT are training agents I would be skeptical of them.

however, there is a practicality issue too. Avoiding all untrustworthy software would have you end up living in a shack in the woods foraging for food.