FYI Facebook has two-factor auth as well: https://www.facebook.com/note.php?note_id=10150172618258920.
But I guess it's tricky -- maybe I'm signing in from a remote location after many months of inactivity to post some vacation photos, and can't receive texts on my phone because it doesn't work in whatever country I'm in...
It's the little things like this that put me off to Facebook. It feels like every attempt to make the site "better" is just another attempt to get more information from a user.
It would be preferable if they could just use the Google Authenticator app like a few other sites do.
I had my account compromised once, it's not something I want to repeat.