It would only be better if namecheap mandated two factor authentication. Giving the user the option to use poor security is like a bank that lets its customers

It would only be better if namecheap mandated two factor authentication. Giving the user the option to use poor security is like a bank that lets its customers decide what bank vault to install, then blames its customers when they are robbed.