Two-factor authentication and access logs in administration. Users can also protect their unique account by password. Everything is encrypted of course.