What exactly is the trap here? Most websites telling you to use google authenticator or lastpass doesn't mean there is an evil cabal out to get you!