they can't rugpull the code as git is inherently decentralized (each fork keeps a perfect history of all copies)

but it could (and has) rugpull collaboration tools