[cerberusss]

Yeah but I don't really know what to do about that, except for using a domain provider with 2FA.

And of course you're always exposed, I'm not sure why you'd mention that. It's no reason to just give up and do nothing.