Because, 2FA is part of secuirty. It's one of the secuirty features that can help protect data from an unauthorised access. More about security best practices: https://gitprotect.io/blog/github-security-best-practices-15...