Allowing git never allows a forced push
Saying "always allow" to one git command now covers that kind of command only, and a forced push still asks first.
When you told the agent to always allow a command like git status, it quietly allowed every git command, including a forced push that can overwrite work on GitHub.
Now an always-allow covers that kind of command only, for example git status or git commit. Commands that can lose work, like a forced push, still ask you first, even under an older allow you already gave. If you ever allow one of those on purpose, that exact choice is kept.