They also only have SMS as a 2FA option, which is neither convenient nor secure. I've been a customer of theirs for a long time, but they do indeed make some poor decisions every now and again.
What do you consider a convenient way to protect yourself? A VPN on your laptop isn't going to help much if your laptop is compromised or stolen. 2FA would of course work though.