the comment by the ISPAI fellow is quite silly. He is speaking without understanding that privacy is all about ! The man doesn't seem to know that the privacy of an email account is enhanced by protecting it against password hacks. That's what asserting your identity, through an additional thing that you have - an OTP (one-time-password) through a phone in your hand, not just what you know i.e. password - which doesn't change with every login and can be hacked/guessed/seen, etc.