We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Provide a security option that, when enabled, requires users (including admins) to always enter a 2FA code when attempting to change any security related settings. A 2FA code should also be required on any attempt to permanently delete files/folders from Dropbox Rewind. The idea is to prevent ransomware attacks from being able to compromise the user's ability to restore their files.
In short, there is a need to prevent the type of situation that happened to this poor fellow:
