LoL. I love Elysium, but this is madness now. One spam string wasn't enough for us? Now you add another spam string "two-factor auth". Seems its time to use lua script to get rid of this.
Please Elysium, don't use annoying methods to accomplish your goals.
It's not blizzlike. And I doesnt want change my password often, I have my mail password for 15 years, my retail WoW password for 10 years.
Make it blizzlike, write that sentence once, when player login into world.
I think they have all characters data, but all data was encrypted (and with good encrypted method). So they can't decrypt it without complex key from Nostalrius team.