You can block accounts on GitHub and add a note as to why. Might be simpler and more accessible later on than a random TXT (plus, it probably updates if they change their username).

Note that blocking also means they can’t contribute to your repos. Which you may not care about anyway.