I think white listing addresses should be a high priority considering security risks. 2fa should be required to approve an address followed by a minimum 48 hour waiting period.