OK... sounds like quite a challenge. Still somebody wins the lottery most weekends (or even just now and then) so without a second factor it is quite possible (however unlikely) that somebody will find my data (even if they were looking for something else)..... right? For those who wish, would it not be a good idea to allow/require the use of some second factor?