3 ms·

right, but 2FA usage is something npm can actually verify, so that we as package consumers can ask/receive some security guarantees from publishers.