Time-based codes (TOTP / RFC 6238) can be completely automated, that is not bot prevention by any means.

I just use my password to login to my free github account, bu it's not like 2FA stops bots anyway. It just makes it a little harder.

2FA was for the safety of your account, not to block bots.