Users are encouraged to allow 2FA just after registration to attenuate the risk of unauthorised availability