All That's Needed to Hack Gmail and Rob Bitcoin: A Name and a Phone Number

This is why it's very important to have a real TOTP based solution supported for these kinds of services.