Are we learning anything from the recent GitHub hack?

A week ago, GitHub announced they've been hacked. A hacker group called TeamPCP had extracted roughly 4000 private repositories and who-knows-how-much more data from GitHub's internal systems. This sounds like a pretty big deal (and it is!), but I fear we're not taking the right lessons from it.