Seems like people have recently realized this is an attack vector. Starting May 31, I've received an immense amount of spam. GitHub, in their infinitesimal wisdom, make you log in to unsubscribe! Which of course I can't do on my phone. So I've taken to reporting their notifications as spam.