We don't plan to add 2FA, but potentially could. We do require authentication using your private key, extension or access to your nostr DMs which is the general standard for most nostr apps.

We make enough to pay our infrastructure costs and have some sats left over, but come nowhere near paying a salary or any personal bills for either of us. Nostr.build consists of two people, and we both have day jobs. Neither of us have ever withdrawn and/or converted any sats for fiat and just let any extra sit in cold storage for an emergency, a low month, etc.