as with everything these days, there is unfortuntly a pretty big downside to github stars being so easy to buy: bad actors can now post malicious code and immidiatly buy thousands of stars making it look like thier code has been approved by thousands of people.

since its a big task for many people to directly read the code of the Foss apps they install, github stars are how a lot of people judge a projects validity, so it’s still a bad thing to have fake stars