I don't know much about security but let us discuss
1- we use dynamic IPs, not all ISPs provide static IPs for their client.
2- OK
3- What's user reaction, how you'll handle it??
4- It's default.

I think there're sites manage and secure financial transactions.