Yeah, now that github requires 2FA, which means I frequently have to do the phone dance, I'm always wary of clicking a github.com link.