Two-factor authentication methods, ranked by what they actually protect against
Two-factor authentication is treated as a single feature with a checkbox. It is a category containing methods with wildly different security properties, and picking the wrong one produces the feeling of security without much of the substance.