I think companies need to put up tools that put privacy and security in the hands of their users and make it easy to understand those tools. In Google's case, two-step verification is a perfect example of this.