One time password app on IOS/Android or a security token would also keep your account protected. It honestly needs to be mandatory.