How is two-factor authentication not a prerequisite for using Nest in the first place? I know we've moved as a society fairly quickly from expecting users to g

How is two-factor authentication not a prerequisite for using Nest in the first place? I know we've moved as a society fairly quickly from expecting users to generate entropy to something that is actually secure. So it's understandable that some companies lag behind. But Google is attempting to connect everything they can to the internet. If the bar for them isn't to at least prevent the easiest, most obvious hack from causing catastrophes then we're living in an idiocracy. A user reusing passwords is bad. But in a civilized technological society the consequences for doing that cannot be a disembodied voice appearing communicating with one's child to give them nightmares. Google's security teams surely know you can't "educate the user" to stop reusing passwords. If their official response is, "We did the right thing by suggesting two-factor authentication," then it doesn't matter how many engineers they throw at the problem. Evil is afoot.