There are reasons beyond paranoia. As you may have noticed, you had to register your game to access this mod.
Public github makes it easier for pirates to get the mod. They just copy the latest version, and don't have to deal with paradox.
There's really nothing stopping people with genuine access to distribute the mod on other websites, but that's not under my control.
There are, ofc, other reasons too.