I still don’t see the issue. There’s a HackerNews account and a GitHub account. The HackerNews account could be some random person.

All of the other aspects of identity are on the other side, the GitHub account with the real name, other projects, a reputation. So then, consider the Hackernews account to be some random, start the check-out at the GitHub, and you don’t see anything particularly suspicious.