After the Ticketmaster/Snowflake attacks adding two factor is becoming more important when large amounts of data can be exported. There are other ideas floating out there to limit those damages, but the first is to try and lock the front door a bit better.