I’ve had numerous accounts of people getting my password through a breach or something and 2fa being the only thing that stopped them from getting into my account. On GitHub that’s my strongest logins, don’t know why anyone would be against securing their code