Can 2FA mitigate exchange risk?