Keybase desktop has no app protection (PIN) or 2FA

The native desktop application does not require *any* login verification. Upon opening, a malicious user could revoke all verification, change the passphrase for the account, and revoke all gpg keys. This effectively erases a user.

The concept of installing on many devices to ensure the stability of your identity chain basically becomes a huge attack surface without some form of login verification. At minimum, a pin should be unique on each device.

No files, tests, or entry points are named. Start by locating the native desktop login and account-action flows, then determine how device-specific PIN protection or 2FA would cover destructive operations such as revoking verification and GPG keys. Done should include an agreed security design and coverage for the protected actions.

Written by the indexing model from the issue text.