[arp242]

> something as important as source hosting?

But it's not important for a lot of people. Lots of people just create the occasional issue or some such. Almost no one is a maintainer of something important.

And overall it's just a hassle that adds zero security for me; I just have the tokens in the password manager next to the passwords (where else do I store it? I just have my laptop).

It's something that should be the user choice, based on how important the account is, personal factors, etc.