Two-factor auth certainly lifts general security -- but I'd also be running http://www.openwall.com/john/ http://www.openwall.com/john/ to prevent poor primary

Two-factor auth certainly lifts general security -- but I'd also be running http://www.openwall.com/john/ http://www.openwall.com/john/ to prevent poor primary passwords in the first place. Why isn't http://code.google.com/p/google-authenticator/ http://code.google.com/p/google-authenticator/ the go-to solution? Open source codebase, ports for iOS, Android, and Blackberry, and it's easy to integrate with...?