Comment by grayclhn

That was my first thought too, but I bet the pull request approach is really hard to spam. As I get more and more quasi work-related spam emails, that looks more and more appealing.