Being a loyal TP-Link customer, I'm shocked that TP-Link mesh Wi-Fi products aren't flexible and secure enough by:

• allowing only cloud-management
• not including multi-factor authentication for the cloud control-plane

I appreciate that most vendors use cloud control-planes (consumer and business solutions) for the benefits that brings to the vendor (fewer  support calls for improperly managed/configured self-hosted control planes) and the consumer/business (easier to get up and running). 

However, any cloud control plane worth its salt will ensure secure authentication for the control plane (mobile app or portal) with Multi-Factor authentication.