2FA

I now know that if someone got a hold of a members password they can use thier account without Two Factor Authorization i see this as a big problem so i suggest the organization to require 2FA