Yea, I am not sure a self-generated username and password is a brainwallet. You can still create extreme random alpha-numeric sequences to protect your wallet as securely as a private key.
Rumor has it ZelCore is launching a decentralized 2fa to secure wallet shortly.