Force 2-factor authentication (2FA) for all users to comply with GDPR

Agreed. This would be very useful tool and help with compliance. Should be standard.