Security:
◾Missng of 2FA/U2F - two-step authentication via Authenticator or/and Hardware (e.g. Yubikey)
◾You can change my email address for the user very quickly (you don't even have to confirm this fact via email). This could be a potential threat and easy account takeover.
◾It would be nice to have the option of SSO login (Google, Microsoft, Apple)