Your comments

Use expected option in admin settings

Logo can be changed;
Not the background.

This has been implemented in v3.

It is yet implemented.
Needs to be enabled from settings page

In V3, DUO is available.
You can enable any hardware token to perform the auth step.
I believe it is a good way to answer this topic no?