Ask HN: Why no TOTP on the website? Account theft potential abounds | Hacker News Reader