This is a rare case where multi-factor authentication, and the option to involve biometrics as hardened sub-layer auth, would be nice.

To be adequately effective, though, all back-up activities would require the full authentication credentials for all verification factors, which might only be possible with, say, a fingerprint scanner (touchbar) equipped laptop, or additional external hardware peripherals for other types of systems.