I think it would be great for major orgs to turn on 2FA for all org members as general security hygiene. We did this on JuliaLang a while ago, and I enabled it on JuliaPackaging today. I am sure some orgs already do this, but I am posting this here to encourage more orgs to require 2FA for all members.
I extracted all orgs in General (which includes user accounts as well as orgs). There are 94 with the Julia prefix, which suggests that it is somewhat official. Both lists are in the gist below. Maybe about 30 of these may need 2FA attention to start with?
In fact my hope was to use this opportunity to curate the list of orgs that provide popular packages, and then go back and update it on the julia website. I even want to advertise the orgs and the packages a bit more on julialang.org instead of just listing them.