> highly unlikely that you lose commit access even if you don't complete the "enrollment"

This statement does not appear to be correct.

According to the roadmap graphic[0] (that has no useful accessibility alt text) it says 7 days after deadline "Blocked from accessing GitHub features until you enable 2FA".

[0] https://github.blog/2022-12-14-raising-the-bar-for-software-...