curl --request GET \
  --url https://api.example.com/v1/profile/security \
  --header 'Authorization: Bearer <token>'

{
  "two_factor_method": "app",
  "backup_codes_remaining": 5,
  "last_password_change": "2024-01-15T10:00:00Z",
  "active_sessions": [
    {
      "device": "Chrome on MacOS",
      "ip": "192.168.1.1",
      "last_active": "2024-03-21T14:30:00Z",
      "location": "Zurich, Switzerland"
    }
  ]
}