I'd guess it's somehow related to their "sudo mode": <a href="https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/sudo-mode" rel="nofollow">https://docs.github.com/en/authentication/keeping-your-accou...</a>