They are far from cheap, and they are not secure either. I removed the 2FA from an account via chat without any authentication, and others said on HN that they managed to do the same. They are a terrible company - stay away! You can spend millions protecting your infrastructure, but if your domain is not well-protected, all can go down the drain instantly!