I think some have only heard bad things about SVG exploits but perhaps aren't familiar that IMG embedded SVGs (like those used in Github readmes) don't carry those risks as they're restricted from running Javascript, external content or videos.

Ahhh that would make sense. Thanks for the explanation