Is 2FA worth it?