Sending tax forms via email
It would be great if your system didn't send tax forms as attachments via email. There are more secure ways to provide access to tax forms to your users.
Support YubiKeys and other hardware-based authentication methods (security keys)
Because it's possible to lose access to your two-factor authentication app, offering support for hardware-based authentication would be helpful in preventing account lockouts.