I find it hard to believe we still do not have 2FA lol. It literally is 3 lines of code, pretty unresponsable towards the users to let it slip...over a whole year...despite constantly being asked for.
I agree
. Few lines of code, yes, if using google authenticator. Unfortunately i got the impression that they want to do their own 2FA (which would req significantly much more work, time and maintenance). But one thing shouldnt rule out the other imo. If they want to do their own 2FA, then first implement google authenticator (since it will be faster, cheaper and easier) and then work on their own "more secure" 2FA.