I read your requirements and threat model further down the thread, which is really helpful when thinking about possible solutions. Before being comfortable rec

I read your requirements and threat model further down the thread, which is really helpful when thinking about possible solutions. Before being comfortable recommending anything, I have question about GitHub's 2fa implementation here, which others may be able to answer. Without 2fa, an account can be accessed if you compromise the password (which might be long and high entropy or equally might be terrible) but not otherwise. If totp (or sms) 2fa is enabled and the 2nd factor is compromised but the password is not, is there any action that can now be performed against the account which couldn't previously, when 2fa wasn't enabled? My question is essentially: is the 2fa purely extra security, or is it trusted without the password in any situation? If I publish my text messages world-readable in real-time and post the TOTP key in the local newspaper, is my GH account still secure provided the password remains as secret as it was previously?