You know what&#x27;s really scary? Gmail is held up as the pinnacle of email security, but they let you reset your password by proving ownership of <i>just a phone number!</i><p>So much for 2FA. So much for strong passwords. All I have to do is obtain your SSN, call up your cell phone provider and hijack your phone number, and initiate a password reset with Google. That gets me into your Gmail, which in turn gets me into all your other accounts.<p>Ridiculously easy. Google should be ashamed.