Not requiring security keys for staff in 2023 is inexcusable.