Crypto is missing built-in (or even bolt on) 2FA.

While secure from brute force, it’s is less secure against practical attacks like this one.