Just received a password reset notification that wasn't initiated by me, which suggests that someone somewhere has an interest in HN accounts. We bang on about security here more than any other place, but this site itself doesn't seem to have a 2FA option. I know it's a very minimal site with minimal features but perhaps this would  be a worthwhile addition?