I would agree with everything you say, but why not both?

We are actually facing 2 distinct problems:

- Github is a centralized, controlled git hosting, identity, collaboration platform.

- Bots are attacking any public facing interface.

So maybe the solution is:

- to keep a Radicle node private/behind fences to lower the maintenance/security burden, with eventually access to selected collaborators.

- publish the repos with a static site generator like pgit