Todo has a web app!
It's not really comfortable to know someone can control your home just by having your login
2FA should be mandatory
Not happening any time soon.
Jurian of Tado stated “We know that a small subset of "power users" is really interested in this. However, this is not something that the mass market cares for at this time. We are waiting for the right time to start looking into this.”
For some reason Tado believes that if their security unaware customers do not explicitly ask for 2FA, it is something nice to have for “power users” only.
Imagine a bank using the same line of reasoning. Tado should know better.
Also see this: https://community.tado.com/en-gb/discussion/comment/25581#Comment_25581