You always had the option for that, they didn't change the settings.
Their security options in the user settings are one of the best, you can choose which actions to lock and with what method (email or 2FA software).

I guess this doesn't help much if the hackers can empty the wallets themselves though!