I know the opinion of the Steem devs is that 2FA is overkill, but it really is a good idea to allow the option at this point.

SteemConnect is great, but logging in is still not secure if your PC is compromised.

I'd really like additional security measures as well.