Participants should allow 2FA after membership to attenuate the possibility of unauthorised accessibility