Suggestion: bug reporters shouldn't be forced to enable custom two factor just for code.videolan.org
I just logged in via GitHub (very easy, less hassle than average bugzilla!) to file a ticket.
However, then I was greeted with an info that I MUST activate custom 2FA just for code.videolan.org with an extra app which I can tell you right now I am very unlikely to do. I imagine for many other occasional reporters, this will be similar.
I'm not sure if you want regular user tickets here outside of the core contributors, but if you do I suggest this 2FA enforcement should be disabled for regular accounts here, at least if they're linked to GitHub auth - it's not like I have a custom login/password here which could be stolen, after all, and my GitHub account itself DOES already have 2FA enforced