I wonder if they actually consider expanding security options for accounts after that much time. The only 2FA they seem to still have is sending an email with 4 digits code.