SMS 2FA is the devil. It’s the reason I haven’t swapped phone numbers even though I get 10-15 spam texts a day. The spam blocking apps don’t help and intrude on my privacy.
FYI github already supports using passkeys as a combined login/2FA source. I haven't used my 2FA codes for a while now.