Is "let untrustworthy people change our code" a common approach in GitHub? Every GitHub project I've ever worked on expects all but their trusted insiders to submit PRs

If you can't trust Greg not to make collisions, you definitely shouldn't let him write code!