yes 2FA is great for security but also 2FA can save you from running an accidental `npm publish` command too (speaking for a friend, who allegedly was saved by this, just now)