What can you say about the platform security system? It seems to me that registration is too simple, only logs and password. No additional security levels.
I agree, now the user account is almost not protected. The only thing you have to hope for is a complex password and the fact that developers activate Google two-factor authentication faster