For those of you using github, this is how you want your 2FA:

SMS is bullshit, for nearly a decade at least now.

Github mobile bypasses the other methods. Don't install it.