Two-factor authentication — is it available?

Login is protected by captcha and throttles today; the auth provider supports stronger factors and they're on the roadmap. Use a strong unique password — the reset flow is solid.