Queue, captcha, and a withdrawal PIN.
The TorZon login has one extra step at the door and one extra lock on the vault.
Every visit hits a server-side waiting room first, a static access-queue page that holds you briefly. It is flood control: bots that do not respect the queue cannot hammer the login behind it. Mildly annoying the first time, normal by the third.
Register with a fresh username, a unique password, and store the recovery phrase on paper. TorZon also enforces a withdrawal PIN, separate from the login password, so even a stolen session cannot move your balance without it. Set a PIN you do not use anywhere else.