Account control: 2FA, sessions, email change, and an activity log

Everything you need to control your account now lives at /me/security. Two-factor authentication (2FA) — set it up with any authenticator app (Google Authenticator, 1Password, Authy, and others), with recovery codes for a lost phone. Sessions — see every device you're signed in on and end any of them except the current one. Email change — switch your address from settings; the new mailbox is confirmed by email. Recent activity — a log of meaningful security events (sign-in, password change, 2FA enabled, token issued). A new /me/privacy page also gives you self-serve data export and full account deletion — no support tickets required.