Great idea for the two-factor authentication plugin! Yet this plugin would be much more interesting if it could protect also admin backoffice.
Do not understand me wrong, security is always great, but users does not store any vital information in their profiles, on the other hand if someone could unauthorized access to the admin backend, data breach would be very problematic.
Regards