2FA Continue to be cost effective and viable for identity protection, as you read the recent news where Google issued a 10k physical USB authentication key for high risk people who use their services. It is also better than doing nothing, as most of the users will prefer to recycle and use the same password