I think the follow up will be more critical, especially the public explanation. That will have the potential to either strengthen GH's credibility or destroy it.
Why should they give a public explanation for something that should've stayed internal in the first place? This should've stayed between the OP, GitHub and GH's HR team.