Disable 2FA -> fall under 45mil users -> don't have to implement the most stringent version of the new law -> profit?