@hsl @digitalocean You'll hate re-provisioning servers when 2-step is bypassed. 2FA is appropriate here, 2SV really isn't.