Ask HN: Why no TOTP on the website? Account theft potential abounds | Dark Hacker News