We use mobile-based sign-in for quick access. For security-sensitive flows we'll ask for OTP or additional verification.