Two-factor or not two-factor? That is the security question (infoworld.com)