In reply to Nathan.

Right, if it's doing it from inside wp-admin. But if you have a seperate admin interface -- outside of wp-admin -- your own external dashboard, that can install plugins or themes from GitHub via api calls to the WordPress site, that'd be okay.