Shifting to two-factor auth is hard to do, so GitHub recommends the long game - Slow and steady wins this race Black Hat  Getting people to use multi-factor authenticati... - https://go.theregister.com/feed/www.theregister.com/2023/08/10/github_multifactor_authentication/