Shit, are we getting to that point where all non-password logins are “2fa” like how all denial of services are “DDoS”