That's another step in the right direction, but 23andMe is the kind of service that people create an account for and then don't use for years at a time. Still n

That's another step in the right direction, but 23andMe is the kind of service that people create an account for and then don't use for years at a time. Still not a complete solution. And I agree that mandatory 2FA isn't a good answer either. As someone who uses long, random passwords on all websites, I like to be able to choose whether to add 2FA on top.