Hacker News Reader

If you set login to require 3/10 then 3 of those ways would need a security flaw before your account is compromised.

and then you'd need 3 factors just to log in, let alone any additional MFA those have

Yeah, I guess it could be inconvenient. On the other hand for many things I don't need to log in very often due to cookies keeping me logged in.