I love the security feature which requires (EMAIL CONFIRMATION) during transaction. This is a great security feature/mechanism just in case...
Especially when it allowed the hackers to steal coins from bitcoin.cz accounts and others.
Oh, there is two-step authentication via third party named Google-spy-know-all, if you are comfortable with it. Ownership of Google-controlled Android phone is mandatory. Your e-mail, phone calls will be recorded and the data shared with the US government as a precaution, should you mean any trouble to them.
Minor point, I know, but I don't think an Android phone is mandatory. Google Auth has iOS app for iPad & iPhone for example.