Less secure methods of authentication require you to disclose a secret image.  The least secure additional authentication measure is simply sending an access password to your e-mail account.  This can be compromised by a hacker that also has access to your e-mail.