Wtihdrawal address white list
Like many other exchanges already implement (Binance for example). A list of address toward which we can withdraw BTC. Adding a new address to that list would require 2FA AND email confirmation, and maybe some delay of a few days before enabling withdrawals to that new address.
This would add a new layer of security to users funds.