In addition to my recommendations in the blog post, I'd also recommend asking all your team members to use Two Factor Authentication if you're using GitHub.com vs GitHub enterprise. Otherwise do you agree or disagree with my suggestions?