But that fine because the trusted device is the second factor (what you have). You can have multiple second factors with Github. I currently have two Yubikeys

But that fine because the trusted device is the second factor (what you have). You can have multiple second factors with Github. I currently have two Yubikeys and one authenticator app enabled. If I lose one I can still log in with another.