Account stealing via changing GitHub username
If you change your GitHub username to a username that someone else is already using with GitHub login (for example if they deleted their GitHub account) grants you access to their account. Does GitHub protect against this? Can we trust it? Can we get a user ID from GitHub instead of username that would explicitly link a user?