There are some projects which legally can't be hosted on third party servers. Sometimes it's not about security but legal bindings. Even though they don't make sense, they do exist. There are also situations where you simply can't explain the benefits of Github to the decision maker.