I agree with proper confirmation and 2FA requirements. But the really bad UX is that it's OPT-OUT instead of OPT-IN. If you're going to force users into your sy

I agree with proper confirmation and 2FA requirements. But the really bad UX is that it's OPT-OUT instead of OPT-IN. If you're going to force users into your system and insist on opt-out then you should at least have the decency to make the opt-out process as convenient and painless as possible.