[pionar]

Of course the 2FA wouldn't prevent it from being hacked, but that's not the point of it. The point is that even if someone gets the password and cracks it, it's still useless as the attacker doesn't have the other factor.

[pyre]

If the attacker has open access to the network (from compromised machines), does the password to the admin console matter as much?