A password is just not enough. 2FA is almost a necessity I would guess.