From 2020 two factor authentication will be required. I recommend using OTP Auth for this.

Merge requests are a place to propose changes you've made to a project and discuss those changes with others

Interested parties can even contribute by pushing commits if they want to.