The fact that there is no two-factor authenticator, sincerely I did not expect it.
Some update:
UfoDex does not store your login/password.
They are used to generate private keys for your wallets in the way Coinb.in wallet does.
This actually makes 2FA authentication almost useless. Besides, we strongly recommend not to use weak login/password pair, since generating private keys is more about math than about security.
On the other hand without knowing your login/password the exchange is not able to access or lock your funds.
Anyway, we are working on mobile app which will completly remove private keys from web-client, will enable full 2FA authentication and tx signing confirmations for any operation.