@HeartInternet You're welcome to take this feedback with a pinch of salt, but rather than having to rememorise a new secure, and infrequently used password annually, I'm more likely to just move my domain to another registrar who doesn't require that *and* has 2FA.