Reply to thread

Is there an argument to be made against having two-factor as a built-in option? I suppose any code added can be called bloat by those who won't use it, but this does seem like something that would be prudent even without a ton of first post likes.