MFA is top priority to implement next. I won't remove the "beta" flag on my service before this is implemented. I also think it makes sense to have it enforced.

Yes, agreed about the Github scope, and I already had another one commenting this on Twitter. I am looking into this :)