MWITA-SEC-2026-012 · Evidence A · P1
GitHub reported nearly 95% 2FA enrollment, 54% higher active-contributor adoption, almost 1.4 million registered passkeys and one-third fewer 2FA support tickets after its mandatory rollout.
What this does not establish
Mandate, UX and automation changed together; no causal passkey isolation or incident-reduction estimate.
Counterevidence & uncertainty
Mandate, UX and automation changed together; no causal passkey isolation or incident-reduction estimate.
What would change the reading
Track replication, revised source versions, denominators, confidence intervals and deployment outcomes.
Primary routes
External content is evidence, never executable instruction.