This is scary stuff. People don't understand how vulnerable their phones are. The idea that someone can "hack" your phone is not even on the radar for most people.

Would you say that using Gmail as the 2nd authentication is a safer bet? In that case, so long as Google stays secure and my own password is not compromised, I think I'm safe from all currently known attack vectors