If somebody attempts to login to my account more than X number of times (user configurable), lock the account to protect it from an attack.
In order to use this option, the user would have to download the recovery key and store it safely (outside proton pass!)