As other commenters have noted, the argument in the article is ridiculous. If you don't like the feature, dont use it. That said, I think there are some possib

As other commenters have noted, the argument in the article is ridiculous. If you don't like the feature, dont use it. That said, I think there are some possible areas of improvement: 1) I agree with the author that the ability to revoke a 30 day session would be excellent. If someone steals my laptop I'd like the option to force 2 factor on that device. 2) I'd like a Windows/Mac OS X authenticator token app. This exists for RSA, I'd like the same for Google. (bonus point for making it different than the token on my phone and allowing me to disable the software remotely) 3) Provide a way for application developers to register that they're the one using this particular one time password and then disallow the use of that password by any other app. (perhaps this could be achieved with OAuth?) In general I like the Authenticator functionality, I think Google has put a lot of thought into it and I'd love to see them try and push for wider adoption.