Thank you @lubos for this great improvement.
My humble suggestion,
As we already have this 2FA feature,
I think it may get it’s full benefit by implementing the related feature already in ideas mentioned below;
Because normally the staffs, they simply try to close the browser in the evening and open in in the morning without need for log in. In between anyone access the computer will get the chance to do anything in the account under the user’s name.