Help babe is telling me that 2 step is required by IRS.

 It is recommended, not required. This is really so bogus!

Data security is my responsibility, not Sasafras's.

What are they going to do about this? Can they just make it once a day?

Can they make it optional?