I think users should be able to activate 2 step verification to increase security of the account as the account may hold addresses, payment information, etc.