I guess at some point developers will have to prove they're serious developers by exposing their GitHub profile.

Edit: it's part of your profile already, better vibe code some random ideas to farm some GitHub dev credibility.

Because effective anti-spam account measures are not 1-2 prompts away.

It's built on laravel, email/pass/2fa/forget is all built in. GitHub auth only was a choice.

Maybe spam concerns, but your point remains valid.

How about ssh public keys

And having those passwords leaked is probably only another 1-2 prompts away