What stops them from doing that with code hosted somewhere else as long as it's publicly accessible?

If anything, it being on Github makes it impossible for them to claim ignorance about the license. If they scrape your code off your site, they'd have to actively add checks to look for the license.

They'd rather just use the "it's probably as fine as every other piece of HTML" assumption they're working with now.