Wouldn't enabling two-factor on the primary login and naming sites whatever you want solve most gripes with this (in the comments here)? i.e. I name hacker new

Wouldn't enabling two-factor on the primary login and naming sites whatever you want solve most gripes with this (in the comments here)? i.e. I name hacker news hn or hack, as opposed to news.ycombinator.com - one more thing to guess for an attacker.