2FA or 2nd email
To the product and security teams,
Please provide an option to permanently opt out of all two-step verification prompts, identity checks, and security nagging on accounts.
I understand you consider these features security best practices, but constantly being prompted for email confirmation codes or nudged to enable 2FA—even when using trusted devices—is extremely intrusive and harmful to user experience. Anyone intent on compromising an account will bypass basic friction anyway, while legitimate users are left dealing with constant hurdles just to log in.
If a user explicitly chooses not to enable additional authentication layers, respect that choice. Stop displaying recurring banners, login prompts, and identity check screens every time an account is accessed. Give users full control to opt out permanently.