The website requires a login and two factor authentication every time I look at it which could be many times a day. The cell phone app does not so it is wide open. I am told there is no option to turn off or limit two factor for the web but was advised to “use the app on my phone”. My phone is connected to the Internet so the risk on my phone is equal to the risk on my laptop. I do not understand why a customer cannot opt out of two factor authentication on the web. I use an 18 character password that uses alpha, numeric and symbol characters which would be very hard to crack.