Two-factor authentication is newspeak for "you can't sign in if your smartphone is broken".