Another thing to know: in the hamburger menu there is a "require face id option". Turn it on, otherwise if your phone is snatched from you (while unlocked), they can access your 2-factor codes.