Seems to me the top security choices also involve the most friction. While I agree 2-way authentication is currently the most popular and secure form of authentication, it will not stay that way for long. There are much more frictionless ways to perform 2-way authentication, even 5-6 factor authentication can be performed more quickly, with less friction, than 2-way authentication.