In order to increase the security of Homey, especially since it is possible to access it through the internet, is to have 2FA (eg. pwd + OTP, as Smartthings).
In addition, it would be good to have the possibility to restrict it and allow to run it only locally (restricting internet → Homey access).
