2FA is great for security in case of a hacker attack. But what happens if you are "visited" in person and "asked" for moving your funds over?
I propose an additional optional switch to lock funds at the Invictus wallet for a certain time period (maybe 24h or 3days) before they can be withdrawn.
With that lock I would have to declare my request for withdrawal and after that time period I could do so. Probably and hopefully too long for a wrench attacker visit...