Its good to have 2fa for trading. But why do we need 2fa for connecting to WebSocket? It's really hard to connect WebSocket with access_token every time. I request kite developers to do some alternatives to make it easy connecting WebSocket.
Your point is correct. But when we try to create some application using WebSocket, we need to enter all the security questions for connection. To prove our identity, we don't need to answer all the question daily for WebSocket connection. I expect some oauth like feature. So that it can be easy to automate systems.