How can we improve WHMCS?

The option to "Check to skip the fraud check for existing clients who already have an active order" works great until a client's account is hacked. Then they don't get any security checks on any orders placed until manual intervention.

It would be great to enhance that option so that the client also must have 2fa enabled, thus making it far more difficult for the client account to be compromised.