Wow, such a bad security combo: 1- Not enforcing 2fa for new accounts and migrating old ones to app 2fa on login + requiring mail code enter before that to crea

Wow, such a bad security combo: 1- Not enforcing 2fa for new accounts and migrating old ones to app 2fa on login + requiring mail code enter before that to create a temporary weaker 2fa, this way some users will spot the problem and click that they're hacked 2- lack of data encryption for servind data to client(so that 23me has full access to unencrypted db on isolated servers, but users will need to enter some additional password 3- not checking against existing pwned dbases and autoreset the password 4- better control for sharing dna data for ppl discovery. Why on earth they provide 1.5k matches, they could limit to 100 closest ones for example and provide 1.5k for additional pay For such a company that handles this data, I would have expected much harder security measures