Does Github and Microsoft have a habit of stealing money from people? I’d be more worried about giving my info to some random open source “collective” group that has considerably less experience with compliance and security.
The down votes you have should indicate the general opinion here, but;
Microsoft's takeover of GitHub is generally considered in the open source community as a negative.
After all, Microsoft's behaviour indicates a generally opposing ideology.
With regards privacy, Microsoft is up there with the worst of them (a la Facebook) with their telemetry, at the very least.
Beyond that, Microsoft has a ( perhaps rightly so) capitalist agenda which doesn't fit with open source.
In case you missed the mass exodus from GitHub on the announcement of their takeover, those that value the freedoms of Libre generally are not in favour of a Microsoft GitHub.
Giving GitHub your bank details can be reasonably synonymised with giving Microsoft your bank details and giving them a cut of the money you intended to give to a developer.
At this point, all the additions to GitHub that Microsoft are making, demonstrate how disconnected they are from that community.
Alternatives such as open collective are quite well regarded in this community and their ideology aligns like Microsoft's never will.
Worse comes to worse, you can ask a developer for a PayPal, Bitcoin or plain old bank details and just send money straight you them.
I'm not saying there are not those for whom this will be of value, but GitHub as-was is no more and ideally if some neutral party willing to host an open source, libre alternative were to show themselves, or would be more desirable than a Microsoft GitHub, for this community.
To present my anecdotal example; I don't run Windows, I don't have an Xbox, I don't have my bank details in GitHub; Microsoft is up in the top-list of companies that don't (willingly) get my bank details.
