[fixermark]

The fact that "your aunt" can access the Internet at all without some moral equivalent of a driver's license is testament to the fact that our societies have balanced the freedom of information made available by accessing the Internet with the individual's responsibility to understand the basics of the tools of accessing said Internet.

... and stories such as this are the consequence we shall have for taking the Libertarian solution. Not that I disagree with the solution taken! I just have a hard time swallowing the argument that it's always the provider's responsibility to account for total user ignorance at all times. A solution has been provided for this attack vector, and if the end-user chooses not to use it then perhaps at some point the onus is on the end-user.

(Or perhaps Google should just make 2FA mandatory for everyone, "your aunt" included).