📢 Announcement: further 2FA hardening by only allowing secure methods

On July 1, 2026, we've configured a new organization-wide setting that makes the previously set up 2FA requirement for the members even stricter, disallowing that members have insecure fallbacks in their accounts and only use secure 2FA.

We used the advisories mechanism to announce this internally but figured it's only fair to spread the word here more transparently, after some embargo period.

The details are here: GHSA-fv7w-c47q-whfm