Github 2fa uses TOTP and doesn’t require an app or phone number. They don’t get to “monitor people”.
This is a sensible security move and I support it fully. I guess I’m a government bot. Supply chain attacks are a real problem, this will help block them.