There is already 2FA, why don't they disable mail confirmation for withdraw (or put it in option)