Be warned, though: this will only create a secure connection between the user and CloudFlare, not between CloudFlare and GitHub Pages.

While a potential for concern... I would guess that CloudFlare's own routing would take them to an exit node close to Github's... that does make quite a few assumptions though. It would still be more complicated to mitm between CloudFlare and Github than ISP-X (or China) and Github...