Sure, 2FA is great and all, but you know a website is *really* secure when they disable clipboard support on sensitive form fields.