Re: 2fa? wtf?
I don't see why there would be any sales drop if 2FA is _enabled_ as an _optional_ feature for those who wish to use it. I can't see any harm in promoting it on the site either, within reasonable limits. You could even offer a modest financial incentive like a 5-10% discount campaign for those who switch over and stick with it (or maybe some sort of bonus accumulating with each 2FA login). There's no need to just drop it on everyone like a ton of bricks, whatever got you by so far can probably keep doing it for the immediate future for those who don't switch 2FA on right away...