HTTPS push authenticates with your account password. A revocable token (like a GitHub PAT) would be safer, since it can be scoped and revoked without changing the password.
SSH already avoids this — add a key at /settings/keys and push over ssh://git@localhost:2222.