I genuinely could not care less about it. Most of it is trivial click-through session validation (Github -> Microsoft auth -> Github) where most of the pain is solved by auto-redirect, the rest is auto-filled by my password manager - including 2FA, although that part is technically probably not the best idea.

If I ever have to manually fill anything in, it is almost certainly going to be a phishing attempt. It immediately jumps out as "this is unusual, something is wrong here".

The only thing which bothers me is email login links, but luckily I don't daily any apps which use them.