Disabling it for all non-staff though makes it far harder to deal with an issue that crops up and prevents login. It’s great if it’s admin (or staff) only, but what happens when something goes wrong and you’re not already logged in?
(Just thinking out loud)