Sometimes bots operate with serious values, such as channel management, cryptocurrency or NFT. An example of such bots, working with TON cryptocurrency is @wallet, @CryptoBot, @tonRocketBot and others
It is necessary for such bots to be able to protect values via standard security features available in Telegram, such as two-factor authentication and pin codes. In particular, it should be possible to confirm critical actions such as spending large sums of cryptocurrency with two-factor authentication or ask to turn 2fa on.
Such features will increase security. There is not such ability in Bot API
Now, an attacker could steal an unlimited amount of such values from stolen accounts. If there is forced two-factor authentication, there will be fewer problems.