The post is talking about 2FA for > active contributors (for example, those who commit code, open or merge pull requests, use Actions, or publish packages) So

The post is talking about 2FA for > active contributors (for example, those who commit code, open or merge pull requests, use Actions, or publish packages) So it may not be required to simply file a bug report.