Has anyone taken a look at how GoodSync Connect is secured? I have used it to sync folders between local devices and discovery is enabled by the GoodSync Connect account. They offer 2FA for this account, but only via email or SMS.
Does the security of devices rely on the security of this account? If someone was able to access this account, would they be able to add their own device to the sync chain and extract files from all the devices configured as file servers?