[vorpalhex]

If you cared a lot about security, wouldn't you have built the platform on basic security methods like 2fa and hard sign in from the start? Surely patching these in afterwards will leave gaps. Are there other important security precautions coming "in the near term" like encryption at rest?

[Aloha]

Is 2fa a norm in the corporate card market?

I've carried a handful of different corporate cards, and do not recall even being offered an option for it.