Yes anyone can go to github, revert code and do whatever.. but the point is if they do: they broke the protocol acceptance.
For anyone running with the new client: he can't go to YOUR machine and change the code YOU are running, he can only change his own client's code...
If he changes his client code (which anyone is able).. then his client code effectively would not be able to communicate with YOUR client code.. and thus a fork happens.. Your client which has the code would just reject any attempt at connection.. and your blockchain would never be modified with that transaction. Even if on his blockchain it did..
We're talking about a network of distributed systems and clients here.. thus it's about what you accept.. if you take the client that has the fix.. then by definition you are protected.