[eimrine]

My opinion is that any 2fa is bad. If Bitcon can work without usernames, phone or email verification then your service also can.