Add a 2FA mode that supports 2FA for all users that have at least one matching challenge activated for themselves (e.g. OTP), but don't force a fallback to the email challenge if no active challenges are available, but rather accept password only in

In 2023, Kirby should support modern, secure authentication out-of-the-box: that is TOTP which can be setup via QR-Codes (way more secure than e-mail OTP), FIDO and Passkeys.

Adding plugins to https://getkirby.com/plugins currently requires a PR to the website repo, which is (not impossible but) difficult to do on the web as adding new files in new directories is tricky using the GUI on github.com. A form-based process

Actually it's a pain for content editors that there's no built in revisioning or backup system. A simple versioning for files to move backwards 2 or 3 steps would be awesome! A simple content lifecycle as found in plugins (publish later) would be