> Should they have required 2FA for everything? If an average online gaming service or social network can manage sending 2FA codes over email or SMS when their

> Should they have required 2FA for everything? If an average online gaming service or social network can manage sending 2FA codes over email or SMS when their users are logging in from a new device, the holder of a large chunk of the world's genetic data can as well.