Hacker News Reader

yes I don't like security decisions forced upon me, that's reasonable. if I want a throwaway email, I don't need MFA because I don't care if the account is compromised. but I don't get to make that decision because Google decided for me that my account will have forced MFA

View on HN

>if I want a throwaway email, I don't need MFA because I don't care if the account is compromised.

But Google cares if their servers are used to send spam or worse, because it makes their email service less useful for other users who may not use it as a throwaway account.

I imagine it's because they would be (legally) responsible for any malicious usage of your account.

Based on what? Have the laws changed, or has there been a recent ruling on something related to this?

"I imagine" which means they have no idea what they are talking about

Reply on news.ycombinator.com