> Regardless of the critical nature of an online account or the individual who owns it, using a second form of authentication should always be the default optio

> Regardless of the critical nature of an online account or the individual who owns it, using a second form of authentication should always be the default option, regardless of the method chosen. Couldn’t disagree more. This is oversimplification of a complex subject.