TOTP two-factor on the front end

This account can register domains directly on my Nominet TAG at my expense, so login security matters. Please add TOTP 2FA - a leaked password shouldn't let anyone run catches under my TAG.