I am new to metamask and I am not sure if this has been suggested.
I appreciate the pass phrase but if its compromised then I will need a new account.
I would like to suggest some additional security like adding multi factor authentications for every login or every transactions.
If its not possible,
Then how about adding email/phone notifications for every login or transactions?