I can't believe any organization (except open source projects) allows the use of co-pilot

Me too, but then I see everyone hosting their code on github and I’m not quite sure what the substantial difference is.

Loads of them do. If you are already using Github enterprise it doesn't change meaningfully change anything from a security perspective.