[jamespo]

If they are clued up enough to require 2FA to send email remotely, they're clued up enough to keep logs.