>>Are Two-Factor Authorization and reCAPTCHA optional?
Two-Factor Authorization option can be enabled or disabled from the Geeklog Config. If enabled then the user has the option to use it or not (it must be setup by them in My Account).
It has been enabled on Geeklog.net so you can look at your own my account to see what it looks like.
The reCAPCHA plugin can be disabled or uninstalled if you don't want to use it.
>>Passwords now must contain 8 characters and have at least 1 letter and 1 number in it
That is only for new passwords. Existing user passwords don't change. I've updated the news article to reflect this.
One of the Geeklog Core Developers.