pragmatism often trumps idealism. email and 2fa, while imperfect, are a reasonable trade-off against widespread key mismanagement.