Whilst I was beavering away with infrastructure improvements post-Feb-outage, I thought I might as well add some peace of mind for those security consciences out there.
I can add optional two factor authentication with Google Authenticator if there are enough people out there who would like it use it. As with SSL there is a annual cost to the plugin.