Force 2-factor authentication (2FA) for all users to comply with GDPR

Agreed- this is an important one!