[faust201]

> 2FA is a mitigation against people getting pwned by reusing passwords or using

Stolen/lost password hashes or some AI based programmer that dumped passwords in plaintext somewhere in a database.

If 2FA is proper even trivial passwords are fine.