When setting up two factor authentication (2FA), don't show the QR code right away #18667
Description
Ideally we would hide it at first, and have a link to make it visible. This way in case you have people around you, you can send them away first.
The link to click to make it visible would need to very obvious, otherwise it's easy to get lost.