[P_I_Staker]

I think they do this in Europe. I believe that there is still loss of some security. With email only you could loss all your accounts.

So, while I mostly agree overall, especially with respect to silly little things that aren't likely to hurt anyone, I do think there's a compelling case for password and 2factor.

As it stands, you have to know something and have something. Making it so you only need to have something is better than making it so they only know something.

However, that second factor seems like a good idea; though I will admit that it's probably unlikely that a thief would have the motivation to crack your phone to get your email; is this even easily achievable?