If he is using github account, all he need is to authenticate with it. He is not obliged to keep his email, phone, home address and authenticator ready because system deciding he is sus every 30 days.