Comment by placesalt

I guess one question is: should

> did not have 2fa enabled

be allowed to coexist with

> pretty extensive and personal data