Add 2FA options (either app OTP or webauthn).
·