Happy to see Github is doing what ALL services should start doing: making 2FA mandatory in order to have an account. Every account you have must have at least, 2FA with a TOTP app. If you really care about security, with a YubiKey or other hardware device.