very promising project to find what's going on with the communities. I would add a filter by the organization type on the map in order to differentiate meetups from companies and conferences
no, if your database is hacked you still need to decrypt passwords in order to access to accounts, remember that 2-fact auth is just a extra-layer of protection, you still need to bypass traditional security schema