Ask HN: Why did GitHub remove password auth?

Between ssh keys, personal access tokens, and probably their apis (pat or oauth) I think most people should be fine. New or not very tech savvy users will be most likely using clients with oauth login anyway and everyone else will be either doing the same or using ssh keys.

I expect to see major damage to open source. Quite a few projects will be abandoned because people will lose access.

Because personal authentication tokens are better? I'm not too sure where password auth is used