No 2FA, and some pages display raw HTML.
- The e-mail validation resend and confirmation pages display raw HTML, instead of rendered markup.
- Additionally, there is no (TOTP or FIDO2) 2FA!
It is unacceptable that a cybersecurity-focussed organisation like GCHQ considers this to be adequate.








