I'm surprised that this feature wasn't in there to begin with. All social networking (which is primarily what Github is about - the source control really isn't anything new) should include bilateral confirmation.

What they've implemented is adequate, but I'd rather see something much stronger, like active confirmation from both parties before being added to a project.