I think additional layer of security is needed in an application that gathers that much of the information. I wouldn't like anyone to get access to my data. Simple two-factor authentication should be added.