Even if that were perfect, you’d have to make sure to never make a mistake. One commit with the wrong account or not using whatever you’re using to mask where you’re from and you’re toast. Also there needs to be no other identifiers. It’s almost certainly not worth the risk for them.
Because you’d need perfect infosec to pull this off
An anonymous git account and tor?
Even if that were perfect, you’d have to make sure to never make a mistake. One commit with the wrong account or not using whatever you’re using to mask where you’re from and you’re toast. Also there needs to be no other identifiers. It’s almost certainly not worth the risk for them.