How do you deal with stolen funds? If the account of a user gets broken into due to something that is not obviously user error, is there any insurance for these funds?

Also, do you offer two-factor authorization?