> asking them to not bother with any protection from phishing and various password and 2nd factor theft. Yes, so? I can deal with phishing myself, especially w

> asking them to not bother with any protection from phishing and various password and 2nd factor theft. Yes, so? I can deal with phishing myself, especially with TOTP 2FA that risk is far far smaller than the risk of being locked out by some dumb risk heuristic. If the general public can't be trusted, fine. But let me disable these extra "protections"