As of now, you can change your password without inputting your current password. You can also enable/disable 2fa without having to input any code or your current password. Add other options besides email 2fa.