@SHvFl, yes the account doesn't have sensitive information, but we do send the license keys when you win a giveaway via the Conversation system, and also members may have private conversations that they would not want someone else to read. The staff has 2-Step Verification enabled, however I think that because this is a forum based on security discussions it should be enabled by most members. This is the equivalent of a HIPS for your computer protection.
The login process with the 2-Step Verification is very easy to do (for 30 days you will not be asked for a code again), and there is no reason in the world not to have it enabled. It's free, it's easy to use and it's an extra layer of protection.