The 2FA is very nice. 
this should be standard practice for verifying npub ownership.