I quite agree. Not every GitHub account is mission critical. Some are created only to submit homework or to segregate one's online identity. Adding mandatory 2FA is an additional burden, especially if Microsoft ever decide to enforce the use of mobile numbers.