Why Two-Factor Authentication Is Worth the Effort