This is an unbelievable github flaw. And that shows how signature verification systems are essential nowadays. PGP etc. If the answer was not quick, something like this could have a significant impact on the market.
The account itself doesn't really have any effect on anything except some visual things on Github. Even so, it is better for us to have accounts that claim these emails to prevent impersonators from trying to do anything malicious.