In 2024, I think it should be standard that cloud-based services that are able to collect and analyze vast amounts of possibly very, very personal and private data should support at least two-factor authentication such as one-time password (OTP) or/and passkeys, because the best IT security is useless if that is exactly what is missing.
Passwords are not state of the art and a company as progressive as Rabbit should know this and set it up as soon as possible so that access to the Rabbit Hole is only possible with at least two-factor authentication.
Alternatively, as an interim solution, I think it would be OK if there was a “delete all” button in the rabbit hole that could delete all data recorded with r1 for the entire period at once. This should be quickly achievable with a short SQL query or whatever database language is in use. From a data protection and security perspective, it would also be advisable if data in the database were not just marked for deletion as is usual in most cases, but were actually physically deleted, provided that this is permitted by law.
If you need any technical support, please feel free to ask me, I will be happy to help as best I can out of my own interest as a user and r1 holder. 
@rabbit