I think the main point of the argument is that you should not upload other people’s code to GitHub. Whether you upload your own code is your choice to make. Same goes with uploading to YouTube. You should not upload an entire film to YouTube if you do not have the right to distribute the film
This is a feature the Netherlands police actually uses to track phone locations.
It’s possible to send a “silent sms” to a handset and by doing so you can discover where the receiving handset is located. This is undetectable by the user of the handset unless they use a rooted device and monitor all incoming sms payloads.