I'm not best pleased that github is going to enforce me to use 2FA in the next month or two.

Security through trusted third parties is attractive but danger is lurking within that model.

Anyway, has anyone decided to do anything other than the obvious "authenticator app on the phone"? Because I'm pretty wary of it.