Given that attacks against the servers and the frontend are getting more frequent, I hope TFA from Google or Authy gets implemented at some point in the future.  Not comfortable logging in for the first time today to get a message about too many failed login attempts.