Thanks for the reply Peter. Maybe you could have the current password checks on by default, but provide an advanced setting where they can be turned off individually?
Absolutely agree with your comment re. 2FA, although I’m not a big fan of reCAPTCHA personally.
Regards