Making 2fa more user-friendly through trusted devices?

[renintw]

As you will see in on Google or Github, the 2FA code will be asked only once, and then you will be asked if it's a “trusted” device, avoiding being asked every time login in.

Should we allow users to save trusted devices? or we might've required a higher security level on wp.org.

[dd32]

Upstream issue: https://github.com/WordPress/two-factor/issues/230