Restricted access
Every session requires your password and a current authenticator code.
Password access alone never opens admin data.
Internal control surface
Activity is logged and periodically reviewed.