The entirety of the last decade in open source software development can be summarized as this: it is morally reprehensible for your project to not support the causes du jour.

You must adopt a COC. You must rename your branch from "master" to "main". You must use "inclusive" language in your documentation.

Why? Because you must assume the responsibility for everything your project touches. A bad person uses your leftpad.js to perpetuate badness. You must stop them. Someone might get their feelings hurt. You must preemptively protect them.

This is an impossible task. 2FA is fine, sure. I use it myself, and advocate for others to do so as well.

But I'm sick and tired of the "harm reduction" mantra that means I have to entirely rewrite my documentation every 6 months.