If you cared a lot about security, wouldn't you have built the platform on basic security methods like 2fa and hard sign in from the start? Surely patching these in afterwards will leave gaps. Are there other important security precautions coming "in the near term" like encryption at rest?
