I'm surprised they don't do multifactor setup as part of the onboarding process. They offer full blown TOTP[1] but even if it's just SMS based it'd do a lot to

I'm surprised they don't do multifactor setup as part of the onboarding process. They offer full blown TOTP[1] but even if it's just SMS based it'd do a lot to mitigate these credential stuffing attacks. [1] https://ttlc.intuit.com/questions/2902682-what-is-two-step-verification https://ttlc.intuit.com/questions/2902682-what-is-two-step-v...