Are there any considerations for 2FA?
@dafyre We've already added support for 2FA support in our latest major release. We officially support hardware two-factor auth using U2F and TOTP. See https://apps.nextcloud.com/?order_by=name&ordering=asc&is_featured=true.
Hey there!
My name is Lukas, I have been contributing to the ownCloud/Nextcloud code since 2012. Which in conclusion means that I am responsible for many of the security hardenings and features in the code. So if you ever saw an annoying security warning such as the "Trusted Domain Warning", then you can probably blame me for this 
Before I worked as security assessment and forensic investigator. Which means reviewing security, giving trainings and dealing with breaches at Fortune 500 companies. Personally, I do however believe that I have a way bigger impact by helping securing one of the most fascinating open-source projects out there.
I happen to live in Switzerland, which probably shows you how distributed the Nextcloud team actually is 
And because Jos just asked for it a few minutes ago: My favourite color is certainly "pink", my first pet was named "Dieter" and my mothers maiden name is "Müller". Figure if that helps you answering the password reset questions
Cheers
Lukas
Have you heard of SQRL authentication and have you investigated including it?
I happen to have heard about it but we didn't look into that. In terms of authentication, at the moment we're working on actively improving our SSO plugin which now also supports Kerberos for example.
As Nextcloud is quite modular adding another authentication module via API should be quite easy. If you're interested in adding support SQRL authentication and have some PHP knowledge, I'd recommend to join us on help.nextcloud.com in the developers forum or on IRC #nextcloud-dev in Freenode.