A thousand times this. Immutability, reproducibility, traceability.

What irks one the most is the arbitrary discrimination between 'critical' and 'non-critical' maintainers. Use TOTP for everybody and be done with it.