It’s become surprisingly fashionable for social networks and Web services to tout their support for two-step verification and other kinds of upgraded authentication. My big question: Will we get a better experience when security vendors have to attract and support users firsthand instead of going through corporate IT departments?